ActionRank
Check your actions

Nx set SHAs

Stale

nrwl/nx-set-shas · MIT

A Github Action which sets the base and head SHAs required for `nx affected` commands in CI

★ 201 starsLast commit 4 months agoLatest v5.0.1
D
51
/ 100
Security 44Maintenance 56Popularity 49Reliability 58

Security signals

OpenSSF Scorecard4.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: nrwl/nx-set-shas@afb73a62d26e41464e9254689e1fd6122ee683c1 # v5.0.1

Mutable tags like v5.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: nrwl/nx-set-shas@afb73a62d26e41464e9254689e1fd6122ee683c1 # v5.0.1

Score breakdown

Security (35%)44
Popularity (20%)49
Maintenance (30%)56
Reliability (15%)58