Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

configu/setup-cli-action

Sets up Configu CLI in your GitHub Actions workflow

3/10

cloudflare/wrangler-action

🧙‍♀️ easily deploy cloudflare workers applications using wrangler and github actions

8/10

cysharp/actions/.github/actions/fill

3/10

Maintained action available

docker/bake-action/subaction/list-targets/it7ms0/qqq

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10

Maintained action available

livekit/deploy-action

GitHub plugin to control LiveKit Cloud Agents

3/10

Maintained action available

yuya-takeyama/monotonix/actions/filter-jobs-by-dynamodb-state

Make deployment monotonous

5/10

Maintained action available

fortify/github-action/internal/set-fod-var-defaults

Fortify GitHub Actions

3/10

Maintained action available

ai/copy-changelog-to-release

Create GitHub Releases based on latest record in `CHANGELOG.md` file

3/10

anchore/grype/.github/actions/bootstrap

A vulnerability scanner for container images and filesystems

6/10

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

5/10

Maintained action available

step-security/sonarqube-scan-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

9/10

step-security/setup-vals/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

grafana/mimir-loki/.github/actions/image

Like Prometheus, but for logs.

2/10

upbound/terraform/.github/actions/go-version

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

2/10