Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

approved-3rd-party-actions/r-lib-actions/setup-r

GitHub Actions for the R community

4/10

fluxcd/pkg/actions/kubeconform

GitOps Toolkit Go SDK

8/10

softprops/action-gh-release

📦 :octocat: GitHub Action for creating GitHub Releases

7/10

pulumi/action-install-pulumi-cli

GitHub Action to install the Pulumi CLI

4/10

tomwhross/write-good-action

A Markdown prose linting action based on `write-good`

4/10

aws-actions/aws-secretsmanager-get-secrets

7/10

actions-cool/pr-approve

3/10

jpetrucciani/ruff-check

github action to run ruff on your repo

6/10

pytorch/tensordict/test-infra/.github/actions/setup-ssh

TensorDict is a pytorch dedicated tensor container.

3/10

Maintained action available

dsaltares/fetch-gh-release-asset

Github Action to download an asset from a Github release

3/10

pytorch/text/test-infra/.github/actions/setup-binary-builds

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10

zendesk/setup-jsonnet

4/10

Maintained action available

step-security/delete-deployment-environment

GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.

10/10

Maintained by StepSecurity

open-edge-platform/geti-ci/actions/semgrep

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

lukka/run-cmake

GitHub Action to build C++ applications with CMake (CMakePresets.json), Ninja and vcpkg on GitHub.

3/10

erlef/setup-elixir

Set up your BEAM-based GitHub Actions workflow (Erlang, Elixir, Gleam, ...)

6/10

itchyny/s3-cache-action

GitHub Action to save cache files and restore them from Amazon S3

4/10

Maintained action available

googleapis/release-please-action

automated releases based on conventional commits

10/10

anysphere/action-setup

Install pnpm package manager

2/10

step-security/r-lib-actions/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub Actions for the R community. Secure drop-in replacement for r-lib/actions.

10/10