ActionRank
Check your actions

1Password CLI

Actively maintained

1Password/install-cli-action · MIT

Install 1Password CLI into your GitHub Actions jobs.

★ 79 starsLast commit 9 days agoLatest v4.1.0
C
63
/ 100
Security 55Maintenance 96Popularity 38Reliability 49

Security signals

OpenSSF Scorecard5.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: 1Password/install-cli-action@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50 # v4.1.0

Mutable tags like v4.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: 1Password/install-cli-action@1a3160d5e9de1ae0803eaa08a88746f5ae3daa50 # v4.1.0

Score breakdown

Security (35%)55
Popularity (20%)38
Maintenance (30%)96
Reliability (15%)49