Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mathieu-bour/setup-sentry-cli

Setup the Sentry CLI in GitHub Actions

4/10

Maintained action available

step-security/setup-buildx-action/_next/static/chunks/main-app-9dd743a85fcdcd51.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

step-security/hide-comment-action/__builder_checkout_dir__/.github/actions/privacy-check

Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

10/10

aerospike/aerospike-client-nodejs/.github/actions/public-layout.tsx

Node.js client for the Aerospike database

5/10

Maintained action available

nyurik/action-setup-postgis

Setup a PostgreSQL+PostGIS for Linux, macOS and Windows runner machines.

3/10

nvidia-nemo/labs-molt/ci-templates/.github/actions/check-nvidia-sso

A scalable, agentic-first, and HuggingFace-native RL framework for research (9k lines).

7/10

jahid11978/openclaw-jahid.ai/.github/actions/mantis-validate-trusted-ref

jahid

4/10

Maintained action available

optum/react-hooks/.github/actions/public-layout.tsx

3/10

step-security/rsdoctor-action

A GitHub Action for comprehensive bundle size analysis and reporting using Rsdoctor. Secure drop-in replacement for web-infra-dev/rsdoctor-action.

9/10

Maintained by StepSecurity

ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/fill

HMPPS Manage People on Probation UI

8/10

project-tick/ptinfra/.github/actions/setup-dependencies/image

0/10

open-edge-platform/geti-ci/actions/image

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

step-integration-tests/auto-pdpr-test-57655-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/mongodb-github-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Use MongoDB in GitHub Actions. Secure drop-in replacement for supercharge/mongodb-github-action.

10/10

askb/tailscale-openstack-bastion-action

GitHub Action for setting up ephemeral OpenStack bastion hosts with Tailscale connectivity

8/10

camunda/infra-global-github-actions/fossa/image

Small Github Actions maintained by Infra team and used by other teams inside Camunda

6/10

ministryofjustice/laa-crime-equinity-historical-data-frontend/.github/actions/integration-test

Front-end to view and access to historical data from Equiniti

4/10

step-security/action-junit-report

Reports junit test results as GitHub Pull Request Check. Secure drop-in replacement for mikepenz/action-junit-report.

8/10

Maintained by StepSecurity

pypa/gh-action-pip-audit

A GitHub Action for pip-audit

5/10

grafana/falconlogscale-datasource/actions/commands

Falcon LogScale data source for Grafana

7/10