dotenv-linter

Actively maintained

wemake-services/dotenv-linter · MIT

Linting dotenv files like a charm!

★ 305 starsLast commit 2 days agoLatest 0.9.0

/ 100

Security signals

OpenSSF Scorecard6.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: wemake-services/dotenv-linter@0303ce7caee5b6fd6a22cb4e9836fe8a6503db30 # 0.9.0

Mutable tags like 0.9.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: wemake-services/dotenv-linter@0303ce7caee5b6fd6a22cb4e9836fe8a6503db30 # 0.9.0

Score breakdown

Security (35%)57

Popularity (20%)48

Maintenance (30%)92

Reliability (15%)70