Install SSH Key

Stale

shimataro/ssh-key-action · MIT

GitHub Action that installs SSH key to .ssh

★ 614 starsLast commit 4 months agoLatest v2.8.1

/ 100

Security signals

OpenSSF Scorecard3.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: shimataro/ssh-key-action@87a8f067114a8ce263df83e9ed5c849953548bc3 # v2.8.1

Mutable tags like v2.8.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: shimataro/ssh-key-action@87a8f067114a8ce263df83e9ed5c849953548bc3 # v2.8.1

Score breakdown

Security (35%)39

Popularity (20%)41

Maintenance (30%)56

Reliability (15%)70