Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

MishaKav/pytest-coverage-comment

Comments a pull request with the pytest code coverage badge and full report

8/10

grafana/mimir/actions/backport

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

7/10

rudderlabs/github-action-check-size-limit

Compare the real cost to run your JS app or lib to keep good performance in every pull request

3/10

fortify/gha-setup-fod-uploader

Deprecated; please use https://github.com/marketplace/actions/fortify-ast-scan instead

3/10

amyu/setup-android

Setup Android SDK for self hosted runner

4/10

Maintained action available

actions-security-demo/poc-1/.github/actions/custom

Proof of concept repo 1

3/10

Maintained action available

unsignedapps/swift-create-xcframework

A simple Command Line Tool to create XCFrameworks by wrapping xcodebuild.

4/10

beaconbrigade/package-json-version

Github action to retrieve the version number in your package.json file for use in other actions

0/10

mskri/check-uncommitted-changes-action

A GitHub action for checking if repository has uncommitted changes.

3/10

step-security/ssh-key-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

10/10

step-security/docker-login-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub Action to login against a Docker registry. Secure drop-in replacement for docker/login-action.

9/10

elide-dev/bun/.github/actions/setup-bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

2/10

bpmn-io/actions/release-issue

The github actions used by the bpmn-io team

2/10

coveo/plasma/.github/actions/storybook

Plasma components implemented with React!

5/10

Maintained action available

step-security/clippy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

🐻‍❄️📦 GitHub action to run Clippy, an up-to-date and modern version of actions-rs/clippy. Secure drop-in replacement for auguwu/clippy-action.

10/10

CIFriends/prp-preprocessor

A GitHub Action that replaces variables in files

3/10

google/clusterfuzzlite/actions/run_fuzzers

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

4/10

Dup4/actions-setup-gcc

GitHub action to set up GCC

3/10

actionite/secrets-sync-action

A Github Action that can sync secrets from one repository to many others.

3/10

hugoalh/scan-virus-ghaction

A GitHub Action to scan virus (including malicious file and malware).

5/10