Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/create-json/__builder_checkout_dir__/.github/actions/privacy-check

Github Action to create a .json file to use in other steps of the workflow. Secure drop-in replacement for jsdaniell/create-json.

8/10

devsecninja/.github/.github/actions/notify-irm

Hosts my reusable workflows & templates

7/10

jpribyl/action-docker-layer-caching

🐳 Enable Docker layer caching in GitHub Actions

2/10

step-integration-tests/auto-pdpr-test-25038-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

pytorch/executorch/test-infra/.github/actions/fill

On-device AI across mobile, embedded and edge for PyTorch

2/10

Maintained action available

coveo/plasma/.github/actions/action-info.client.tsx

Plasma components implemented with React!

5/10

Maintained action available

amilcarlucas/mypy-github-action

mypy github action

3/10

step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/privacy-check

Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.

8/10

ai-dynamo/dynamo/.github/actions/init-dynamo-builder

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

step-security/s3-actions-cache/__builder_checkout_dir__/.github/actions/secure-download-artifact

Cache to S3 storage with official actions/cache@v2 fallback. Secure drop-in replacement for tespkg/actions-cache.

9/10

vendic/github-automerge-action

Github automerge action

0/10

launchdarkly/go-server-sdk-consul/.github/actions/get-go-version

Consul integration for the LaunchDarkly SDK for Server-side Go

6/10

ministryofjustice/laa-data-claims-reporting-service/.github/get_release_name_to_delete

Java service to generate claims reports

8/10

celo-org/trivy-composite-action

Composite action for the Trivy scanning

4/10

ledgerhq/ledger-live/tools/actions/composites/update-snapshots-desktop

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10

Maintained action available

nvidia/nodewright/.github/actions/cosign-sign-sbom

A Kubernetes Operator to manage Node OS customizations.

7/10

gittools/actions/gitreleasemanager/addasset

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

5/10

Maintained action available

devantler-tech/actions/require-checks-in-pr

Actions designed to streamline CI/CD processes.

4/10

Maintained action available

docker/metadata-action

GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker

8/10

nvidia/onnxruntime/.github/actions/locate-vcvarsall-and-setup-env

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10