ActionRank
Check your actions

AI-BOM Scan

Stale

Trusera/ai-bom · Apache-2.0

AI Bill of Materials — discover every AI agent, model, and API in your infrastructure

★ 296 starsLast commit 3 months agoLatest n8n-v0.8.14
C
61
/ 100
Security 75Maintenance 56Popularity 45Reliability 58

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: Trusera/ai-bom@618c81cd922e76b5bb7eeebd6bd9cec6d2b1bbb1 # n8n-v0.8.14

Mutable tags like n8n-v0.8.14 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: Trusera/ai-bom@618c81cd922e76b5bb7eeebd6bd9cec6d2b1bbb1 # n8n-v0.8.14

Score breakdown

Security (35%)75
Popularity (20%)45
Maintenance (30%)56
Reliability (15%)58