Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
chainguard-dev/actions/gofmt
A collection of reusable Github Actions workflows.
approved-3rd-party-actions/spectral-action
GitHub Action wrapper for Spectral - a JSON/YAML/OpenAPI/AsyncAPI/etc linter with custom rule support.
actions/go-dependency-submission
Calculates dependencies for a Go build-target and submits the list to the Dependency Submission API
pascalgn/size-label-action
GitHub action to assign labels based on pull request change sizes
nv-gha-runners/setup-proxy-cache
GitHub Action for enabling conda/pip package caching in CI workflows via a self-hosted proxy
adoptium/run-aqa
Repository for the Github Action that enables the running of the Adoptium Quality Assurance (AQA) tests
step-security/setup-kubectl/__BUILDER_CHECKOUT_DIR__/.github/actions/compute-sha256
GitHub Action for installing Kubectl. Secure drop-in replacement for Azure/setup-kubectl.
godaddy-wordpress/setup-wp-cli
Composite Action for setting up WP-CLI in a workflow.
rojopolis/spellcheck-github-actions
Spell check action
peter-murray/terraform-variables-action
scruplelesswizard/split-tests
Github Action for splitting a test suite for parallelization with equal time
changesets/action
cisagov/action-job-preamble
A GitHub Action to apply cisagov's standard permissions monitoring and runner hardening. This Action is intended to be applied at the beginning of every GitHub Actions job.
actions/upload-pages-artifact
A composite action for packaging and uploading an artifact that can be deployed to GitHub Pages.
Reality2byte/codeql-action/../action/.github/actions/check-codescanning-config
Actions for running CodeQL analysis
astro/deadnix-action
Workflow to find and delete dead nix code
tim-actions/dco
tideways/release-action
Create a Tideways Release with a GitHub Actions workflow
einaregilsson/beanstalk-deploy
GitHub action (and command line script) to deploy apps to Elastic Beanstalk
MetaMask/github-tools/.github/actions/post-merge-validation
An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews