Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

actions/setup-dotnet

Set up your GitHub Actions workflow with a specific version of the .NET core sdk

6/10

rickstaa/top-issues-action

Labels and displays the top-upvoted (i.e. 👍) issues and pull requests in your repository.

3/10

grafana/terraform-provider-grafana/.github/actions/validate-catalog

Terraform Grafana provider

7/10

sd2k/shared-workflows/actions/push-to-gar-docker

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

2/10

lfreleng-actions/go-httpbin-action

Creates a go-httpbin service within GitHub to act as a local testing endpoint

4/10

Maintained action available

sredevopsorg/metabase/.github/actions/e2e-download-uberjar

The simplest, fastest way to get business intelligence and analytics to everyone in your company :yum:

2/10

kyverno/action-install-chainsaw

GitHub Action to install Chainsaw

5/10

rapidsai/shared-actions/telemetry-impls/clean-up-artifacts

6/10

itchyny/actions-stale

Marks issues and pull requests that have not had recent interaction

2/10

bitwarden/gh-actions/azure-logout

Bitwarden-utilized GitHub Actions.

6/10

grafana/agent/_shared-workflows-dockerhub-login/actions/get-vault-secrets

Vendor-neutral programmable observability pipelines.

6/10

step-security/setup-tflint

A GitHub action that installs Terraform linter TFLint. Secure drop-in replacement for terraform-linters/setup-tflint.

10/10

Maintained by StepSecurity

coveo/ui-kit/.github/actions/e2e-quantic-cypress

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

nvidia/aicr/.github/actions/security-scan

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

dflook/terraform-fmt-check

GitHub action to check the formatting of terraform files

2/10

ory/ci/licenses/check

Automation and robots for Ory's CI and CD pipelines

4/10

rinchsan/renovate-config-validator

:white_check_mark: Validate Renovate config in GitHub Actions

3/10

giraffate/clippy-action

3/10

svanboxel/org-audit-action

GitHub Action that provides an Organization Membership Audit

5/10

fastruby/manage-heroku-review-app

GitHub Action that will create/update a Review App in Heroku

3/10