ActionRank
Check your actions

Ultralytics Actions

Actively maintained

ultralytics/actions · AGPL-3.0

Ultralytics GitHub Actions for formatting, PR reviews, labeling, CI retries, CLA checks, and dependency updates.

★ 118 starsLast commit yesterdayLatest v0.2.45
D
54
/ 100
Security 15Maintenance 100Popularity 42Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilities1 advisory(ies)
  • GHSA-7x29-qqmq-v6qchigh

    GitHub Actions Script Injection in `ultralytics/actions`

    Published Aug 14, 2024

How to use it safely

Recommended: pin to commit SHA
uses: ultralytics/actions@d151ae6b69b83f8a85e30dbc8dda46278e5f10cd # v0.2.45

Mutable tags like v0.2.45 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: ultralytics/actions@d151ae6b69b83f8a85e30dbc8dda46278e5f10cd # v0.2.45

Score breakdown

Security (35%)15
Popularity (20%)42
Maintenance (30%)100
Reliability (15%)70