Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/codacy-coverage-reporter-action/_next/static/chunks/59325-ba32d0874457c4e0.js

GitHub Action for the codacy-coverage-reporter. Secure drop-in replacement for codacy/codacy-coverage-reporter-action.

10/10

lima-vm/lima-actions/setup

Run non-Ubuntu distributions such as Fedora on GitHub Actions

6/10

step-integration-tests/auto-pdpr-test-71008-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

cloudposse/github-action-spacelift-stack-deploy

Deploy Spacelift Stack

5/10

eclipse-zenoh/ci/bump-crates

GitHub Actions and workflows used across eclipse-zenoh

4/10

Maintained action available

nikeee/docfx-action

A GitHub action to run DocFX and generate a documentation site.

4/10

Maintained action available

siemens/ix/.github/workflows/actions/storybook

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

6/10

step-security/runs-on-cache/sidebar.tsx

Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.

10/10

step-integration-tests/auto-pdpr-test-69915-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

heyayushh/setup-anchor

Optimized GitHub action to install Anchor

3/10

annangela/cached_node-modules

A GitHub Action to cache node_modules

5/10

Maintained action available

posthog/posthog/.github/actions/setup-uv

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10

Maintained action available