Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

armbian/build

The official build framework for the Armbian Linux distribution. This repository contains the complete toolchain and scripts required to compile custom OS images from source, including kernel configuration, U-Boot handling, and board-specific tweaks for various ARM and ARM64 single-board computers.

8/10

step-security/hide-comment-action

Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

8/10

Maintained by StepSecurity

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2017/10/relish-video-production.png

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

9/10

tomasreyes/node/node/.github/actions/install-clang

Node.js JavaScript runtime ✨🐢🚀✨

4/10

Maintained action available

asdf-vm/actions/plugins-add

GitHub Actions for the asdf version manager

4/10

step-security/action-read-yaml/__builder_checkout_dir__/.github/actions/privacy-check

Custom github action used to read yaml files, supporting multiple keys and variable replacements. Secure drop-in replacement for pietrobolcato/action-read-yaml.

9/10

burningalchemist/action-gh-nfpm

nFPM Packager action

2/10

rapidsai/sccache/.github/actions/artifact_failure

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

5/10

Maintained action available

tomhjp/gh-action-jira-comment

Add a comment to a Jira issue using GitHub actions

3/10

intheclouddan/publish-vscode-extension

GitHub action to publish your VS Code Extension to the Open VSX Registry or Visual Studio Marketplace.

2/10

zephyrproject-rtos/action-first-interaction

An action for filtering pull requests and issues from first-time contributors

4/10

pozetroninc/github-action-get-latest-release

A Github action to get the latest release from another repository.

3/10

nvidia/kata-containers/.github/cargo-deny-composite-action

Kata containers is an implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.

2/10

yonasbsd/opendal/.github/actions/fuzz_test

Apache OpenDAL: access data freely.

3/10

Maintained action available

ledgerhq/ledger-live/tools/actions/composites/cache/download

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

launchdarkly/ruby-server-sdk/.github/actions/check

LaunchDarkly Server-side SDK for Ruby

6/10

aquanow/usdu-smart-contracts/.github/actions/hardhat-setup

Source repository for the smart contracts powering the USD-backed stablecoin issued by Universal Digital Intl Limited (“Universal”).

5/10

clidey/whodb/.github/actions/fill

A lightweight next-gen data explorer - Postgres, MySQL, SQLite, MongoDB, Redis, MariaDB, Elastic Search, and Clickhouse with Chat interface

4/10

Maintained action available

grafana/k6-extension-actions/public-layout.tsx

Reusable composite GitHub actions to support k6 extension development.

4/10

step-security/github-action-aerospike/_next/static/chunks/93120-465db7aa426f8baa.js

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

9/10