Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
docker/docker-agent-action
A GitHub Action for running Docker Agent AI agents in your workflows.
bolt-silverfox/storytime_be/.github/actions/harden
hckhanh/demo-electron/.github/actions/init-template-with-renderer
backstage/actions/issue-sync
Custom actions for automating Backstage workflows
launchdarkly/go-configtypes/.github/actions/coverage
Golang tools for reading and validating configuration options
damien-robotsix/robotsix-modules/.github/actions/setup
Shared JSON-Schema-driven module-taxonomy validation for robotsix projects.
nvidia-medtech/gr00t-h/.github/actions/setup-venv
Gr00t-H
dflook/terraform-github-actions
GitHub actions for Terraform and OpenTofu
envoyproxy/toolshed/gh-actions/hashfiles
wzieba/firebase-distribution-github-action
This action uploads artifacts (.apk or .ipa) to Firebase App Distribution.
denisa/clq-action
GitHub action for the changelog query tool
nvidia/nvbench/nvbench/.github/actions/configure_cccl_sccache
CUDA Kernel Benchmarking Library
dustin4444/docs-3/.github/actions/precompute-pageinfo
The open-source repo for docs.github.com
andyfeller/issueops-createrepo/public-layout.tsx
GitHub Action solution for creating repository through GitHub issue workflows.
shopware/braintree-app/.github/actions/setup-apps
With the Braintree app, you can now easily integrate one of the most popular solutions for credit card payments into your Shopware store. This repository includes the Shopware app and the app infrastructure. Use this as a real-live example of a capable payment app integration.
protocolbuffers/protobuf-ci/fill
A shared repository for Protobuf CI actions
caffeelake/olmocr/.github/actions/setup-venv
Toolkit for linearizing PDFs for LLM datasets/training
step-security/setup-testkube
GitHub Action to set up the Testkube CLI. Secure drop-in replacement for kubeshop/setup-testkube.
luckypipewrench/pipelock
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.
wow-actions/auto-assign
๐ฏ Automatically add reviewers/assignees to issues/PRs