Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

dustin4444/slsa-github-generator/.github/actions/secure-download-folder

Language-agnostic SLSA provenance generation for Github Actions

3/10

step-integration-tests/auto-pdpr-test-93245-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

miroapp/miro-react-hooks/.github/actions/setup

Collection of React Hooks wrappers for Miro WebSDK

3/10

stakekit/safe-wallet-web/.github/workflows/build

Safe{Wallet} – smart contract wallet for Ethereum (ex-Gnosis Safe multisig)

3/10

saionaro/extract-package-version

GitHub Action that reads a package.json file and exposes its version field as a workflow output.

4/10

aerospike/aerospike-client-java-reactive/.github/actions/stage-release-artifacts

Reactive programming interfaces for the Aerospike Java client

6/10

step-security/action-shellcheck

GitHub action for ShellCheck. Secure drop-in replacement for ludeeus/action-shellcheck.

10/10

Maintained by StepSecurity

huntridge-labs/argus/.github/actions/linter-terraform

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

bokuweb/reg-actions

A visual regression test tool for github actions :octocat:.

1/10

Maintained action available

celo-org/reusable-workflows/.github/actions/image

Publicly viewable repository for creating reusable github actions workflows

5/10

ssciwr/doxygen-install

GitHub Action to install Doxygen

4/10

caffeelake/synthetic-monitoring-agent/.github/actions/go-cache-save

Synthetic Monitoring agent

5/10

Maintained action available

flowwer-dev/pull-request-stats

Github action to print relevant stats about Pull Request reviewers

2/10

cilium/cilium-cli

CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

8/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/privacy/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

alexstormwood/commitswithintime

A helper action that returns true if commits are detected on a repository within a supplied timeframe.

2/10

approved-3rd-party-actions/go-coverage-report

A CLI tool and GitHub Action to post Go code coverage reports as comment to your pull requests.

3/10

homebrew/actions/pre-build

🚀 Homebrew's GitHub Actions

7/10

3shapeinternal/delete-package-versions

3/10

step-security/linkinator-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action that checks your README and other markdown for 404s. Secure drop-in replacement for JustinBeckwith/linkinator-action.

8/10