ActionRank
Check your actions

Get Secret Manager secrets

Stale

google-github-actions/get-secretmanager-secrets · Apache-2.0

A GitHub Action for accessing secrets from Google Secret Manager and making them available as outputs.

★ 197 starsLast commit 11 months agoLatest v3.0.0
D
52
/ 100
Security 56Maintenance 37Popularity 42Reliability 84

Security signals

OpenSSF Scorecard6.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: google-github-actions/get-secretmanager-secrets@bc9c54b29fdffb8a47776820a7d26e77b379d262 # v3.0.0

Mutable tags like v3.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: google-github-actions/get-secretmanager-secrets@bc9c54b29fdffb8a47776820a7d26e77b379d262 # v3.0.0

Score breakdown

Security (35%)56
Popularity (20%)42
Maintenance (30%)37
Reliability (15%)84