Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

coveord/renovate/.github/actions/setup-node

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

2/10

caffeelake/airbyte/.github/actions/start-aws-runner

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

0/10

nvidia-nemo/export-deploy/.github/actions/test-template

A library for exporting models including NeMo and Hugging Face to optimized inference backends, and deploying them for efficient querying

8/10

envoyproxy/toolshed/gh-actions/bind-mounts

7/10

openzeppelin/tron-contracts/.github/actions/gas-compare

3/10

step-security/release-on-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action to create a git tag + release when pushed to master. Secure drop-in replacement for rymndhng/release-on-push-action.

10/10

step-security/sonarqube-scan-action

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

10/10

Maintained by StepSecurity

checkmarx-ts/checkmarx-github-action

Checkmarx Scan Github Action

3/10

carlosperate/download-file-action

GitHub Action to download a file from the internet into the workspace to use in your workflow.

5/10

Maintained action available

nam20485/docs-1/.github/actions/get-docs-early-access

The open-source repo for docs.github.com

0/10

step-security/read-yaml/__builder_checkout_dir__/.github/actions/action.yml

A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.

10/10

grafana/grafana-github-actions-go/github-release

Grafana GitHub Actions in Golang

8/10

coveo/ui-kit/.github/actions/playwright-headless-ssr-commerce-nextjs

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

nvidia/aicr/.github/actions/generate-slsa-predicate

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

pietrobolcato/action-read-yaml

Custom github action used to read yaml files, supporting multiple keys and variable replacements

1/10

caffeelake/arrow/arrow/.github/actions/sync-nightlies

Apache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics

2/10

eball/write-tag-to-version-file

A GitHub Action that fetches the latest git tag within a repo and writes this to a file.

3/10

jsumners-nr/gha-node-deps-divergent

A GitHub action to determine if Node.js dependencies have changed between a PR and the branch it is based upon.

2/10

elastic/docs-builder/actions/validate-path-prefixes-local

7/10

step-security/swiftylab-ci/__builder_checkout_dir__/.github/actions/privacy-check

Support files and configurations for SwiftyLab's CI. Secure drop-in replacement for SwiftyLab/ci.

10/10