Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/delete-deployment-environment

GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.

10/10

Maintained by StepSecurity

open-edge-platform/geti-ci/actions/semgrep

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

lukka/run-cmake

GitHub Action to build C++ applications with CMake (CMakePresets.json), Ninja and vcpkg on GitHub.

3/10

erlef/setup-elixir

Set up your BEAM-based GitHub Actions workflow (Erlang, Elixir, Gleam, ...)

6/10

itchyny/s3-cache-action

GitHub Action to save cache files and restore them from Amazon S3

4/10

Maintained action available

googleapis/release-please-action

automated releases based on conventional commits

10/10

anysphere/action-setup

Install pnpm package manager

2/10

step-security/r-lib-actions/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub Actions for the R community. Secure drop-in replacement for r-lib/actions.

10/10

step-security/paths-filter/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter.

10/10

hyperledger/fabric-samples/.github/actions/fsat-setup

Samples for Hyperledger Fabric

5/10

Maintained action available

dacbd/create-issue-action

Another create an issue on GitHub action that strives to be as simple as possible... (The 10,000 GitHub Action on the Marketplace)

5/10

step-security/kubepug-installer/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

kubepug-installer GitHub Action. Secure drop-in replacement for kubepug/kubepug-installer.

10/10

chrisdickinson/setup-yq

3/10

spotdemo4/discord-embedder/.github/actions/init

Embed videos from URLs in Discord

3/10

step-security/setup-jfrog-cli/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Set up JFrog CLI in your GitHub Actions workflow. Secure drop-in replacement for jfrog/setup-jfrog-cli.

10/10

home-assistant/actions/hassfest

GitHub Actions for Home Assistant workflows

7/10

approved-3rd-party-actions/r-lib-actions/check-r-package

GitHub Actions for the R community

4/10

chronograph-pe/bake-action

GitHub Action to use Docker Buildx Bake as a high-level build command

3/10

step-security/action-markdownlint/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Run markdownlint with reviewdog. Secure drop-in replacement for reviewdog/action-markdownlint.

10/10

mknejp/delete-release-assets

GitHub action for deleting assets from a GitHub release.

3/10