Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

buildless/cache

Cache dependencies and build outputs in GitHub Actions

2/10

jasonkarns/bump-homebrew-formula-action

Automatically bump Homebrew formula after a release

0/10

kong/slsa-github-generator/.github/actions/fill

Language-agnostic SLSA provenance generation for Github Actions

3/10

a-sync/s3-upload-github-action

A simple github action to send files to AWS S3.

3/10

lee-dohm/close-matching-issues

A GitHub Action to close issues matching a query

2/10

step-security/gradle-actions/image

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub. Secure drop-in replacement for gradle/actions.

8/10

josm/josmpluginaction/actions/setup-ant

4/10

Maintained action available

grafana/mimir-prometheus/actions/backport

7/10

flexion/opencode/.github/actions/setup-git-committer

The open source coding agent.

5/10

Maintained action available

meta-introspector/scorecard-action

Official GitHub Action for OpenSSF Scorecard.

3/10

nodejs/web-team/actions/setup-environment

The Node.js Website Team Governance Repository

8/10

step-security/issue-closed-labeler-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Conditionally add or remove labels of issues when closed via a PR. Secure drop-in replacement for RebeccaStevens/issue-closed-labeler-action.

8/10

yonasbsd/oxc/.github/actions/clone-submodules

⚓ A collection of JavaScript tools written in Rust.

5/10

Maintained action available

sonatype/actions/evaluate

Public repository to keep Sonatype's GitHub Actions.

3/10

Maintained action available

umani/changed-files

GitHub action to export a PR's changed files

2/10

yonasbsd/surrealdb/.github/actions/setup-databases

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10

Maintained action available

mobile-dev-inc/action-maestro-cloud

2/10

Maintained action available

yonasbsd/turbo/.github/actions/setup-node

Incremental bundler and build system optimized for JavaScript and TypeScript, written in Rust.

5/10

Maintained action available

tbowman01/prompt-card-system/.github/actions/gitleaks-action-v2

A comprehensive prompt testing and evaluation system with advanced analytics, AI-powered optimization, and real-time performance monitoring.

5/10

canonical/documentation-workflows/linkcheck

Reusable workflows for the documentation team

3/10