Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/mise-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

9/10

momentohq/standards-and-practices/github-actions/error-email-action

Information about how we organize, maintain, and release open source software at Momento

3/10

step-security/ssh-key-action/.github/actions/cache-npm

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

8/10

gradle/gradle-build-action

Execute your Gradle build and trigger dependency submission

7/10

yonasbsd/servo/.github/actions/parse_msrv

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

5/10

Maintained action available

homebrew/actions/gh-try-download

🚀 Homebrew's GitHub Actions

7/10

step-security/add-and-commit/__builder_checkout_dir__/.github/actions/privacy-check

:octocat: Automatically commit changes made in your workflow run directly to your repo. Secure drop-in replacement for EndBug/add-and-commit.

9/10

v7labs/ssh-agent-gha

GitHub Action to setup `ssh-agent` with a private key

3/10

equinor/segyio/.github/actions/benchmark

Fast Python library for SEGY files.

4/10

canonical/action-build

A Github action for building Snapcraft projects

2/10

step-security/github-tag-action/__builder_checkout_dir__/.github/actions/privacy-check

A Github Action to automatically bump and tag master, on merge, with the latest SemVer formatted version. Works on any platform. Secure drop-in replacement for mathieudutour/github-tag-action.

9/10

catchen/eslint-suggestion-action

This GitHub Action runs ESLint and provides inline feedback to the changes in a Pull Request.

4/10

Maintained action available

yonasbsd/iggy/.github/actions/go/pre-merge

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

3/10

Maintained action available

go-semantic-release/action

:octocat: semantic-release GitHub Action

5/10

che-incubator/setup-minikube-action

Setup minikube to install/start Eclipse Che using as most as possible available memory/cpu

3/10

peterrhodesdev/build-a-badge

GitHub Action to create dynamic and customizable README badges using shields.io/endpoint

3/10

rudderlabs/rudder-transformer/.github/actions/restart-deployment

Open-source, warehouse-first Customer Data Pipeline and Segment-alternative. Collects and routes clickstream data and builds your customer data lake on your data warehouse.

3/10

Maintained action available

caffeelake/gemini-cli/.github/actions/post-coverage-comment

An open-source AI agent that brings the power of Gemini directly into your terminal.

2/10

nv-gha-runners/setup-bazel-cache

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

4/10

step-security/mise-action

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

9/10

Maintained by StepSecurity