ActionRank
Check your actions

set-env

Abandoned

allenevans/set-env · MIT

Programmatically set github action global environment variables that can be used in subsequent steps

★ 54 starsLast commit 2 years agoLatest v4.0.0
F
28
/ 100
Security 28Maintenance 4Popularity 31Reliability 70

Security signals

OpenSSF Scorecard1.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: allenevans/set-env@7ccfd08576e7096fe3b98928bd0320d2b9a65728 # v4.0.0

Mutable tags like v4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: allenevans/set-env@7ccfd08576e7096fe3b98928bd0320d2b9a65728 # v4.0.0

Score breakdown

Security (35%)28
Popularity (20%)31
Maintenance (30%)4
Reliability (15%)70