Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

cilium/scale-tests-action/validate-cluster

cilium/scale-tests-action/validate-cluster

Repository that hosts the GitHub action to run scale tests

3/10
ServiceNow/sncicd-apply-changes

ServiceNow/sncicd-apply-changes

3/10
peterjgrainger/action-create-branch

peterjgrainger/action-create-branch

Github action to create a branch

3/10
danielroe/provenance-action

danielroe/provenance-action

Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status

4/10
vapier/coverity-scan-action

vapier/coverity-scan-action

Coverity Scan Github Action

4/10
snyk/actions/node

snyk/actions/node

A set of GitHub actions for checking your projects for vulnerabilities.

8/10
pytorch/tensordict/test-infra/.github/actions/setup-binary-upload

pytorch/tensordict/test-infra/.github/actions/setup-binary-upload

TensorDict is a pytorch dedicated tensor container.

3/10
JetBrains/writerside-github-action

JetBrains/writerside-github-action

Writerside curated GitHub Action used to generate the documentation website using JetBrains Writerside

5/10
nubificus/git-trailers

nubificus/git-trailers

Action to parse a PR branch/info and add `git trailers` to persist PR metadata history in the commit messages.

3/10
CordEngine/.github/actions/security

CordEngine/.github/actions/security

7/10
snok/container-retention-policy

snok/container-retention-policy

GitHub action for pruning old GHCR container image versions.

6/10
xqlym5/continuous-integration/actions/update-lockfile

xqlym5/continuous-integration/actions/update-lockfile

Bazel's Continuous Integration Setup

3/10
Vendic/magento2-checkout-newsletter-subscription/.github/actions/setup

Vendic/magento2-checkout-newsletter-subscription/.github/actions/setup

The magento2 module adds a newsletter subscription checkbox to the default checkout sidebar.

2/10
celestiaorg/.github/.github/actions/markdown-lint

celestiaorg/.github/.github/actions/markdown-lint

5/10
thomasjpfan/labeler

thomasjpfan/labeler

An action for automatically labelling pull requests

2/10
swinton/commit

swinton/commit

✅ GitHub Action to create verified commits

2/10
grafana/prometheus-alertmanager/.github/promci/actions/publish_release

grafana/prometheus-alertmanager/.github/promci/actions/publish_release

Prometheus Alertmanager

4/10
jpoehnelt/secrets-sync-action

jpoehnelt/secrets-sync-action

A Github Action that can sync secrets from one repository to many others.

2/10
chainguard-forks/ingress-nginx/.github/actions/mkdocs

chainguard-forks/ingress-nginx/.github/actions/mkdocs

Ingress NGINX Controller for Kubernetes

5/10
panva/DefinitelyTyped/.github/actions/setup-for-scripts

panva/DefinitelyTyped/.github/actions/setup-for-scripts

The repository for high quality TypeScript type definitions.

5/10