On-demand self-hosted AWS EC2 runner for GitHub Actions
Stalemachulav/ec2-github-runner · MIT
On-demand self-hosted AWS EC2 runner for GitHub Actions
★ 857 starsLast commit 3 months agoLatest v2.6.1
C
59
/ 100
Security signals
OpenSSF Scorecard3.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: machulav/ec2-github-runner@343a1b2ae682e681c3cec9a235d882da17ff04ef # v2.6.1Mutable tags like v2.6.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: machulav/ec2-github-runner@343a1b2ae682e681c3cec9a235d882da17ff04ef # v2.6.1
Score breakdown
Security (35%)39
Popularity (20%)56
Maintenance (30%)66
Reliability (15%)96