ActionRank

Fetch API Data

Stale

JamesIves/fetch-api-data-action · MIT

🚚 GitHub action for handling authenticated API requests, allowing you to save the data from the request into your workspace as an environment variable and a .json file.

133 starsLast commit 3 months agoLatest v2.5.0
C
57
/ 100
Security 61Maintenance 56Popularity 40Reliability 70

Security signals

OpenSSF Scorecard5.1 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: JamesIves/fetch-api-data-action@8dc51e982d982157bfd575ed64be3c48b3078037 # v2.5.0

Mutable tags like v2.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: JamesIves/fetch-api-data-action@8dc51e982d982157bfd575ed64be3c48b3078037 # v2.5.0

Score breakdown

Security (35%)61
Popularity (20%)40
Maintenance (30%)56
Reliability (15%)70