Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mikepenz/action-gh-release

📦 :octocat: GitHub Action for creating GitHub Releases

2/10

myrotvorets/composite-actions/node-prepublish

Composite actions used by our workflows

5/10

Maintained action available

hoprnet/hopr-workflows/actions/setup-node-js

GitHub workflows helping HOPR automate tasks via actions

3/10

pytorch/pytorch/.github/actions/download-build-artifacts

Tensors and Dynamic neural networks in Python with strong GPU acceleration

6/10

step-security/setup-protoc

GitHub Action to setup the protoc compiler for protocol buffers. Secure drop-in replacement for arduino/setup-protoc.

10/10

Maintained by StepSecurity

aerospike/aerospike-client-nodejs/.github/actions/setup-docker-on-macos

Node.js client for the Aerospike database

4/10

grafana/plugin-ci-workflows/actions/internal/check-matrix-status

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

7/10

aquasecurity/setup-trivy

Set up your GitHub Actions workflow with a specific version of Trivy

4/10

open-telemetry/opentelemetry-ebpf-profiler/.github/workflows/env

The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

8/10

deadsnakes/action

a GitHub action to install (pre-release) pythons from deadsnakes

5/10

Maintained action available

s4u/setup-maven-action

Complete environment configuration for Maven builds

7/10

ambilykk/copilot-usage-report

Export the Copilot for Business seat assignments for an organization that are currently being billed

2/10

modeseven-lfreleng-actions/http-api-tool-docker

Tests an HTTP/HTTPS API service/endpoint

5/10

Maintained action available

TryGhost/action-deploy-theme

:octocat: Deploy your Ghost theme with Github Actions

7/10

newrelic/repolinter-action

✅Run Repolinter in your CI pipeline

5/10

docker/setup-docker-action

GitHub Action to set up (download and install) Docker CE

7/10

azure/powershell

GH Action to run Az PowerShell scripts for developers and administrators to develop, deploy, and manage Microsoft Azure applications.

5/10

approved-3rd-party-actions/kover-report

Github action that publishes the Kover code coverage report as a comment in pull requests

2/10

honeycombio/oss-management-actions/projects

A set of GitHub Actions to apply a common set of OSS management workflows to Honeycomb projects.

4/10

wolfi-dev/wolfi-act

Dynamic GitHub Actions from Wolfi packages

7/10