Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/action-install-gh-release
GitHub Action to install the Github Release binaries. Secure drop-in replacement for jaxxstorm/action-install-gh-release.
ministryofjustice/laa-manage-your-civil-cases/.github/actions/deploy
A service to centrally manage civil legal aid cases for the Legal Aid Agency
rudderlabs/kata-containers/.github/cargo-deny-composite-action
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
selfxyz/self/.github/actions/free-disk-space
Prove your self
actionutils/create-release-pr
WIP
prateek-stepsecurity/harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
chainguard-actions/chrnorm-deployment-status
mitchellh/vouch/action/check-pr
A community trust management system based on explicit vouches to participate.
karancode/yamllint-github-action
Github Action for linting yaml files using yamllint
step-integration-tests/auto-pdpr-test-73566-12/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
step-security/setup-xcode
Set up your GitHub Actions workflow with a specific version of Xcode. Secure drop-in replacement for maxim-lobanov/setup-xcode.
pytorch/tensordict/test-infra/.github/actions/teardown-windows
TensorDict is a pytorch dedicated tensor container.
petarzarkov/gemini-code-review-action
An AI code review GitHub Action using Google Gemini.
casadi/commercial_solvers
Set up commercial solvers in CI for testing purposes
asottile/workflows/.github/actions/fast-checkout
reusable github workflows / actions
oxsecurity/megalinter/flavors/internal/backend/remote-state/oss
๐ฆ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
stellar/actions/rust-cache
GitHub Actions for Stellar repositories.
sredevopsorg/kserve/.github/actions/kserve-dep-setup
Standardized Serverless ML Inference Platform on Kubernetes
step-security/add-pr-comment/_next/static/chunks/87608-0364d2a3d7267426.js
GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.
kong/proxy-wasm-rust-response-transformer/.github/actions/setup
Response Transformer WASM Filter written in Rust