Nested GitHub Runners Action

Abandoned

dougcalobrisi/nested-github-runners-action · MIT

GitHub Action to run multiple self-hosted runners in a hosted GitHub Runner

★ 127 starsLast commit 4 years agoLatest v0.9

/ 100

Security signals

OpenSSF Scorecard2.8 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: dougcalobrisi/nested-github-runners-action@59310f3c646ddcdc90dac9ca684bb64799ca63bf # v0.9

Mutable tags like v0.9 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: dougcalobrisi/nested-github-runners-action@59310f3c646ddcdc90dac9ca684bb64799ca63bf # v0.9

Score breakdown

Security (35%)37

Popularity (20%)30

Maintenance (30%)4

Reliability (15%)30