Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

datadog/test-visibility-github-action

GitHub Action that installs Datadog Test Visibility

5/10

actions/configure-pages

An action to enable Pages and extract various metadata about a site. It can also be used to configure various static site generators we support as starter workflows.

7/10

gittools/actions/gitversion/setup

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

7/10

yonasBSD/neon/.github/actions/download

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

2/10

oddstr13/jellyfin-plugin-repository-manager

A repository manager for Jellyfin plugins

5/10

Maintained action available

modeseven-lfreleng-actions/draft-release-promote-action

Promotes a draft release to full release status

3/10

Maintained action available

aerospike/aerospike-client-python/.github/actions/run-ee-server

Aerospike Python Client

4/10

Maintained action available

boostsecurityio/poutine-action

6/10

ComunidadAylas/PackSquash-action

▶️ Action to run PackSquash in a GitHub Actions workflow.

6/10

ministryofjustice/laa-crime-equinity-historical-data/.github/actions/build-app-gradle

Provide view access to historical data from Equinity

7/10

coveord/spinnaker/.github/actions/publish-halconfig

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

geomais/sql-guardian

1/10

step-security/protobuf-ci/checkout

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

dflook/terraform-apply

GitHub action to apply terraform plans

2/10

jfrog/.github/actions/install-go-with-cache

4/10

Maintained action available

ljharb/actions/node/matrix

GitHub actions I use for CI.

4/10

docker-compose-linter/dclint-github-action

GitHub Action for DCLint. Supports GitHub Annotations and integration with Reviewdog.

3/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

ministryofjustice/serve-opg/.github/workflows/_notify-slack.yml

Serve OPG: Managed by opg-org-infra & Terraform

6/10

github/command

IssueOps commands in GitHub Actions

7/10