Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

php-actions/phpunit

Run PHPUnit tests in Github Actions.

3/10

hatena/hatenablog-workflows/.github/actions/image

reusable workflows for hatenablog

6/10

slsa-framework/slsa-github-generator/.github/actions/checkout-go

Language-agnostic SLSA provenance generation for Github Actions

4/10

kong/public-shared-actions/security-actions/sca

Shared actions available to both public and private repositories

6/10

chiefgyk3d/scrum-around-and-find-out

Board as code for GitHub Projects, a bring-your-own-App Action that keeps it current, and a playbook for running Claude, Codex and Copilot as one team.

5/10

vendic/clickup-get-tasks

Clickup get tasks action

0/10

coveo/stew/.github/workflows/actions/image

Complete Python CI/CD solution built around Poetry.

5/10

Maintained action available

rapidsai/velox-testing/velox-testing/.github/actions/image

7/10

damacus/charts/.github/actions/public-layout.tsx

Helm Charts

3/10

step-integration-tests/auto-pdpr-test-20565-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nvidia/ising-decoding/.github/actions/fetch-models

A set of training recipes for AI Quantum Error Correction Decoders

5/10

chronograph-pe/download-artifact

2/10

sonarsource/sonarqube-auth-action

Authenticate a GitHub Actions job to SonarQube Cloud with its OIDC token (Workload Identity Federation): no stored token.

4/10

chainguard-actions/cycjimmy-semantic-release-action

3/10

Maintained action available

step-security/install-aws-cli-action/__builder_checkout_dir__/.github/actions/fill

Install AWS CLI on a GitHub Actions Linux host. Secure drop-in replacement for unfor19/install-aws-cli-action.

10/10

chronograph-pe/cache

Cache dependencies and build outputs in GitHub Actions

2/10

step-security/create-pull-request/_next/static/chunks/app/layout-c55d3d7ce0fd94f2.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

9/10

step-integration-tests/auto-pdpr-test-48686-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

approved-3rd-party-actions/setup-helm

Github Action for installing Helm

4/10

step-security/retry/_next/static/chunks/app/(public)/action-advisor/%5b...action%5d/page-2ac8df85f3346b02.js

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

10/10