Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

googlecloudplatform/functions-framework-conformance/.github/actions/client/install

A Tool for Validating Conformance to the Functions Framework Contract

3/10

step-security/jest-coverage-action-demo/linux

9/10

step-integration-tests/auto-pdpr-test-01868-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

caffeelake/cilium/.github/actions/bpftrace/check

eBPF-based Networking, Security, and Observability

3/10

step-security/create-pull-request/_next/static/chunks/87511-ea4d82de8f16d6ee.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

kiwix/kiwix-build/actions/dl_deps_archive

Kiwix & openZIM build engine

5/10

Maintained action available

lasith-kg/dispatch-workflow

A GitHub Action to Dispatch and Discover GitHub Workflows using workflow_dispatch or repository_dispatch

4/10

Maintained action available

jessehouwing/action-deploy-theme

:octocat: Deploy your Ghost theme with Github Actions

5/10

Maintained action available

mhils/workflows/uv-sync

Reusable GitHub Actions Workflows

4/10

scribe-security/action-installer

2/10

aerospike/aerospike-client-python-async/.github/actions/get-version

Async Python Client

4/10

Maintained action available

nobrayner/discord-webhook

A GitHub action to report workflow and job status to a Discord Channel via WebHook

2/10

dawidd6/action-send-mail/_next/static/chunks/53543-bc22b880959527c9.js

:gear: GitHub Action for sending emails

5/10

Maintained action available

argoproj/argo-cd/__builder_checkout_dir__/.github/actions/privacy-check

Declarative Continuous Deployment for Kubernetes

7/10

slsa-framework/slsa-github-generator/.github/actions/public-layout.tsx

Language-agnostic SLSA provenance generation for Github Actions

4/10

graycoreio/github-actions-magento2/fix-magento-install

Github Actions and Workflows that make maintaining Magento2 stores and modules significantly easier.

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-06964-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/workflow-telemetry-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

Github action to collect metrics (CPU, memory, I/O, etc ...) from your workflows to help you debug and optimize your CI/CD pipeline. Secure drop-in replacement for catchpoint/workflow-telemetry-action.

10/10

unlyed/github-action-store-variable

Easily persist and read variables to reuse them between GitHub Action jobs

2/10

envoyproxy/toolshed/actions/appauth

7/10