ActionRank
Check your actions

Load secrets from 1Password

Actively maintained

1Password/load-secrets-action · MIT

Load secrets from 1Password into your GitHub Actions jobs

★ 331 starsLast commit yesterdayLatest v5.0.0
C
66
/ 100
Security 57Maintenance 96Popularity 50Reliability 49

Security signals

OpenSSF Scorecard6.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: 1Password/load-secrets-action@e544b780808654ba8ceba5fb2fe2897103d92ff4 # v5.0.0

Mutable tags like v5.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: 1Password/load-secrets-action@e544b780808654ba8ceba5fb2fe2897103d92ff4 # v5.0.0

Score breakdown

Security (35%)57
Popularity (20%)50
Maintenance (30%)96
Reliability (15%)49