ActionRank
Check your actions

Nix Shell

Stale

workflow/nix-shell-action · MIT

Run any command you like in a deterministic Nix shell on Linux and macOS.

★ 50 starsLast commit 4 months agoLatest v4.0.0
D
46
/ 100
Security 37Maintenance 55Popularity 31Reliability 70

Security signals

OpenSSF Scorecard2.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: workflow/nix-shell-action@031bcb0eb0396e0a585e86906809af10fe3bd499 # v4.0.0

Mutable tags like v4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: workflow/nix-shell-action@031bcb0eb0396e0a585e86906809af10fe3bd499 # v4.0.0

Score breakdown

Security (35%)37
Popularity (20%)31
Maintenance (30%)55
Reliability (15%)70