Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
lost-pixel/lost-pixel
Open source alternative to Percy, Chromatic, Applitools.
step-integration-tests/auto-pdpr-test-40728-12/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
cyber-dojo/snyk-scanning/.github/actions/image
Workflows for running snyk scans of individual artifacts and artifacts in a running Environment
step-integration-tests/auto-pdpr-test-56435-1/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
step-security/dtolnay-rust-toolchain/__builder_checkout_dir__/.github/actions/privacy-check
Concise GitHub Action for installing a Rust toolchain. Secure drop-in replacement for dtolnay/rust-toolchain.
ferretdb/github-actions/linters
Shared GitHub Actions for FerretDB repos
politicalsphere/ci/.github/actions/ps-task/trufflehog
CI/CD pipelines and GitHub Actions for Political Sphere
unionai/flytectl-setup-action
Install and setup flytectl for use in other actions
little-core-labs/install-terraform
Install terraform to the current GitHub Actions job
tannergolden/standards/actions/prune-workflow-runs
Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.
openapi-generators/openapitools-generator-action
Generate a client library using the OpenAPITools Generator
pre-commit/action
a GitHub action to run `pre-commit`
tanker187/playwright/.github/actions/enable-microphone-access
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/viasat-fetch-ghdotcom-token-action
Viasat-specific GitHub Action that uses GitHub OIDC + Vault to mint a short-lived (ephemeral) authenticated github.com token for use in GHES workflows (e.g., to avoid unauthenticated API rate limits).
clementtsang/cargo-action
A simple GitHub Action to invoke cargo/cross.
nvidia/infra-controller/.github/actions/setup-mkosi-environment
NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking
telegramdesktop/winget-releaser
Publish new releases of your application to the Windows Package Manager easily.
sett-and-hive/sarif-to-issue-action
A GitHub action for @security-alert/sarif-to-issue
openai/codex/.github/actions/public-layout.tsx
Lightweight coding agent that runs in your terminal
aave-dao/github-workflows/.github/actions/fill
a collection of github workflows used at aave