ActionRank
Check your actions

Simple Dotenv

Actively maintained

xom9ikk/dotenv

GitHub Action to read .env file and add variables to GITHUB_ENV

★ 58 starsLast commit 2 months agoLatest v2.4.0
C
55
/ 100
Security 36Maintenance 74Popularity 34Reliability 91

Security signals

OpenSSF Scorecard2.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: xom9ikk/dotenv@d0a56edc74279820eabbe34477511327e710d0de # v2.4.0

Mutable tags like v2.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: xom9ikk/dotenv@d0a56edc74279820eabbe34477511327e710d0de # v2.4.0

Score breakdown

Security (35%)36
Popularity (20%)34
Maintenance (30%)74
Reliability (15%)91