ActionRank
Check your actions

AWS Secrets Manager Action

Abandoned

abhilash1in/aws-secrets-manager-action · MIT

Use secrets from AWS Secrets Manager as environment variables in your GitHub Actions workflow

★ 69 starsLast commit 4 years agoLatest v2.1.0
F
33
/ 100
Security 39Maintenance 4Popularity 36Reliability 70

Security signals

OpenSSF Scorecard3.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: abhilash1in/aws-secrets-manager-action@2cc6ddf66834f7c9432cbcf5846f6d98286be155 # v2.1.0

Mutable tags like v2.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: abhilash1in/aws-secrets-manager-action@2cc6ddf66834f7c9432cbcf5846f6d98286be155 # v2.1.0

Score breakdown

Security (35%)39
Popularity (20%)36
Maintenance (30%)4
Reliability (15%)70