ActionRank

The Determinate Nix Installer

Actively maintained

DeterminateSystems/nix-installer-action · LGPL-2.1

The Github Action for the Determinate Nix Installer

245 starsLast commit 17 days agoLatest v22
C
65
/ 100
Security 64Maintenance 91Popularity 47Reliability 39

Security signals

OpenSSF Scorecard7.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22

Mutable tags like v22 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22

Score breakdown

Security (35%)64
Popularity (20%)47
Maintenance (30%)91
Reliability (15%)39