Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/sonarqube-scan-action
Secure drop-in replacement for sonarsource/sonarqube-scan-action.
checkmarx-ts/checkmarx-github-action
Checkmarx Scan Github Action
carlosperate/download-file-action
GitHub Action to download a file from the internet into the workspace to use in your workflow.
nam20485/docs-1/.github/actions/get-docs-early-access
The open-source repo for docs.github.com
step-security/read-yaml/__builder_checkout_dir__/.github/actions/action.yml
A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.
grafana/grafana-github-actions-go/github-release
Grafana GitHub Actions in Golang
step-security/add-pr-comment/_next/static/chunks/app/layout-73a91f29ec5503c3.js
GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.
coveo/ui-kit/.github/actions/playwright-headless-ssr-commerce-nextjs
Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.
nvidia/aicr/.github/actions/generate-slsa-predicate
Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes
kong/terragrunt-action
GitHub action for setting up Terragrunt https://terragrunt.gruntwork.io
pietrobolcato/action-read-yaml
Custom github action used to read yaml files, supporting multiple keys and variable replacements
caffeelake/arrow/arrow/.github/actions/sync-nightlies
Apache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics
tanker187/next.js/.github/actions/image
The React Framework
eball/write-tag-to-version-file
A GitHub Action that fetches the latest git tag within a repo and writes this to a file.
jsumners-nr/gha-node-deps-divergent
A GitHub action to determine if Node.js dependencies have changed between a PR and the branch it is based upon.
elastic/docs-builder/actions/validate-path-prefixes-local
step-security/swiftylab-ci/__builder_checkout_dir__/.github/actions/privacy-check
Support files and configurations for SwiftyLab's CI. Secure drop-in replacement for SwiftyLab/ci.
aerospike/aerospike-client-go/.github/actions/fill
Aerospike Client Go
step-security/action-branch-name
Github action to enforce naming convention on branch names. Secure drop-in replacement for deepakputhraya/action-branch-name.
approved-3rd-party-actions/expo-github-action/.github/actions/setup
Expo GitHub Action makes it easy to automate EAS builds or updates