lfreleng-actions/🔐 1Password Secrets Action
Securely retrieves secrets from 1Password vaults
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | 1Password service account token | yes | — |
| vault | Vault name or ID where secrets are stored | yes | — |
| record | Secret specification in one of these formats: - Single: "secret-name/field-name" - Multiple JSON: {"key1": "secret1/field1", "key2": "secret2/field2"} - Multiple YAML: "key1: secret1/field1\nkey2: secret2/field2" | yes | — |
| return_type | How to return values: 'output' (default), 'env', or 'both' | no | output |
| config_file | Path to configuration file | no | — |
| timeout | Operation timeout in seconds | no | 300 |
| retry_timeout | Retry timeout in seconds | no | 30 |
| connect_timeout | Connection timeout in seconds | no | 10 |
| max_concurrency | Maximum concurrent operations | no | 5 |
| cache_enabled | Enable caching for improved performance | no | false |
| cache_ttl | Cache time-to-live in seconds | no | 300 |
| cli_version | 1Password CLI version to use ('latest' or semver like 'v2.18.0') | no | latest |
| cli_path | Custom path to 1Password CLI binary | no | — |
| log_level | Log level: 'debug', 'info', 'warn', 'error' | no | warn |
| debug | Enable debug logging | no | false |
| mock_mode | Enable mock mode for testing | no | false |
| download_url | Custom download URL for the op-secrets-action binary | no | — |
| checksum | Expected SHA256 checksum for the op-secrets-action binary | no | — |
Outputs
| name | description |
|---|---|
| value | Secret value (for single secret retrieval) |
| secrets_count | Number of secrets retrieved (for multiple secrets) |