Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

brenoepics/vmd-action

Easily integrate Vue Mess Detector into your CI pipeline to receive pull request alerts and display badges effortlessly.

2/10

modeseven-lfreleng-actions/1password-secrets-action

Load secrets into GitHub CI/CD pipeline from 1Password vaults

4/10

hashicorp/vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.

7/10

step-security/action-semantic-demo/.github/actions/build-dist

8/10

ariga/setup-atlas

A GitHub Action to install ariga/atlas in your workflows.

4/10

optum/booster/.github/actions/test-integration-run-one

Booster Cloud Framework

3/10

tj-actions/changed

:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.

8/10

LedgerHQ/ledger-live/tools/actions/composites/setup-test-desktop

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

action-pack/set-variable

Action to set a repository variable.

4/10

Maintained action available

signpath/github-action-submit-signing-request

3/10

connor-baer/action-sync-branch

GitHub Action to keep a branch in sync with the current branch

7/10

hashgraph/stablecoin-studio/.github/actions/create-env-file

All-in-one stablecoin configuration, issuance, and management

5/10

lcarva/review-rot-action/web

GitHub actions for review-rot

3/10

step-security/setup-crate/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

📦 GitHub Action to install a Rust crate from a GitHub release. Secure drop-in replacement for extractions/setup-crate.

10/10

run-ai/gajira-find-issue-key

0/10

grafana/plugin-ci-workflows/actions/plugins/docs/test

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

5/10

Maintained action available

opea-project/validation/actions/trivy-scan

3/10

equinor/cc-components/.github/actions/get-fusion-token

Components and apps for CC.

7/10

ministryofjustice/laa-data-claims-reporting-service/.github/deploy_branch

Java service to generate claims reports

8/10

step-security/docker-login-action

GitHub Action to login against a Docker registry. Secure drop-in replacement for docker/login-action.

9/10

Maintained by StepSecurity