Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mujo-code/puppeteer-headful

Github Action for puppeteer that is headful.

3/10

reviewdog/action-shfmt

Run shfmt with reviewdog

3/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/corporate/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

sequoia-pgp/fast-forward

Fast forward pull requests.

2/10

step-security/setup-vals/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

manticoresoftware/clt

Command Line Tester

4/10

Maintained action available

pytorch/executorch/test-infra/.github/actions/calculate-docker-image

On-device AI across mobile, embedded and edge for PyTorch

2/10

Maintained action available

juulsn/todo-issue

🤖 GitHub Action which creates Issues from comments in your code

2/10

Git-Hub-Chris/FreeCAD/.github/workflows/actions/linux/build

Open source 3D modeler.

5/10

Maintained action available

cybernop/build-fhir-ig

3/10

Git-Hub-Chris/VisualStudioCode/actions/classifier-deep/apply/fetch-sources

Microsoft Visual Studio Code.

6/10

yonasBSD/wazuh/.github/actions/vulnerability_scanner_deps

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

grafana/grafana-github-actions-go/auto-milestone

Grafana GitHub Actions in Golang

3/10

notiz-dev/github-action-json-property

☕Simple GitHub Action to read a specified property from a JSON file.

5/10

rasa/delete-workflow-runs

An action to delete workflow runs in a repository.

2/10

archive/github-actions-slack

Github Action for sending message (and reactions/threads/update/blocks) to Slack - With support for Slack's optional arguments

3/10

jurplel/install-qt-action/action

Install Qt on your Github Actions workflows with just one simple action

3/10

pytorch/ao/test-infra/.github/actions/setup-binary-upload

PyTorch native quantization and sparsity for training and inference

2/10

Maintained action available

actions/upload-artifact

8/10

PavanMudigonda/jacoco-reporter

GitHub Action to Publish JaCoCo Format Code Coverage XML and attach it to the Workflow Run as a Check Run. Also can enforce Coverage Quality Gate.

5/10