Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/zip-release/__builder_checkout_dir__/.github/actions/fill
GitHub action that can be used to create release zip archive. Secure drop-in replacement for TheDoctor0/zip-release.
pytorch/text/test-infra/.github/actions/setup-binary-upload
Models, data loaders and abstractions for language processing, powered by PyTorch
jjchange10/test-actions/.github/actions/fill
aerospike/aerospike-client-csharp/.github/actions/run-ee-server
Aerospike C# Client Library
ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_release_results
Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)
supercharge/redis-github-action
Use Redis in GitHub Actions
step-security/setup-beam
Set up your BEAM-based GitHub Actions workflow (Erlang, Elixir, Gleam, ...). Secure drop-in replacement for erlef/setup-beam.
check-spelling/check-spelling
Spelling checker action to check spelling in repositories / pull requests / commits
natescherer/changelog-management-action
A GitHub action to parse and update changelogs in Keep a Changelog 1.0.0 format; built on the ChangelogManagement PowerShell module.
step-integration-tests/auto-pdpr-test-47784-3/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
step-security/claude-code-action/__builder_checkout_dir__/.github/actions/fill
Secure drop-in replacement for anthropics/claude-code-action.
tempoxyz/gh-actions/vendor/lycheeverse/lychee-action
Reusable GitHub Actions for Tempo
yoheimuta/action-protolint
Run protolint with reviewdog
tomhjp/gh-action-jira-create
GitHub action to create Jira tickets with customisable fields
openzeppelin/openzeppelin-community-contracts/.github/actions/image
Solidity library of smart contracts from the OpenZeppelin Community
phips28/gh-action-bump-version
GitHub Action for automated npm version bump.
anchore/go-lzo/.github/actions/public-layout.tsx
A LZO1X decompression library written in go that is permissively licensed
huntridge-labs/argus/.github/actions/scanner-bandit
Argus brings โa hundred eyesโ to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.
deepcode-ai/codeql/ql/.github/actions/fetch-codeql
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
step-integration-tests/auto-pdpr-test-90987-13/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing