Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
rorychan/jira-releases-action
babel/actions/update-changelog
Babel specific github actions ๐ค
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github
This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.
actions-security-demo/pytorch/pytorch/.github/actions/chown-workspace
Tensors and Dynamic neural networks in Python with strong GPU acceleration
microsoft/powerplatform-actions/actions-install
Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.
facebook/pysa-action
GitHub Action for Pysa
fjacquet/ci/actions/setup-uv
Central reusable CI/CD workflows and composite actions
project-tick/meshmc/.github/actions/package/macos
A custom launcher for Minecraft that allows you to easily manage multiple installations of Minecraft at once (Fork of MultiMC)
sobelow/action
Sobelow GitHub
sonarsource/gh-action_release
int128/docker-build-cache-config-action
Generate effective cache parameters for docker/build-push-action in GitHub Actions
nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-build-typecheck
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/image
GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.
nvidia-rtx/godot/.github/actions/godot-project-test
NVIDIA fork of Godot Engine โ Multi-platform 2D and 3D game engine
nick-invision/retry
Retries a GitHub Action step on failure or timeout
dotnet/docs-tools/actions/sequester
This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.
step-security/dynamic-uses/.tmp-dynamic-uses
Dynamically resolve and use another GitHub action
tektoncd/plumbing/.github/actions/setup-nightly-infra
This repo holds configuration for infrastructure used across the tektoncd org ๐๏ธ
step-security/json-to-variables
GitHub action reads JSON file and writes its content as environment variables. Secure drop-in replacement for antifree/json-to-variables.
vendic/copy-files-to-other-repositories
GitHub Action that introduces support for global workflows. Global workflows are the one you update in just one repo and they are automatically updated in other repositories.