Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/setup-nuget/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for nuget/setup-nuget.

9/10

turbocoder13/py-lintro/.github/actions/harden-and-checkout

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

7/10

varunsh-coder/scorecard-action

Official GitHub Action for OSSF Scorecards.

0/10

isaac-sim/isaaclab/.github/actions/run-tests

Unified framework for robot learning with multi-physics/renderer support

5/10

Maintained action available

golang/govulncheck-action

[mirror] GitHub action for govulncheck

4/10

launchdarkly/js-core/actions/package-size

LaunchDarkly monorepo for JavaScript SDKs

6/10

step-security/foundry-toolchain/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action to install Foundry. Secure drop-in replacement for foundry-rs/foundry-toolchain.

10/10

klomgor/nautilus_trader/.github/actions/common-setup

A high-performance algorithmic trading platform and event-driven backtester

7/10

fossifyorg/.github/.github/actions/image

6/10

useblacksmith/setup-python

Set up your GitHub Actions workflow with a specific version of Python

0/10

os-climate/osc-github-devops/.github/actions/python-project-test-matrix

Template Python project, common tests, GitHub Actions/Workflows, linting tools

0/10

step-security/secure-repo/automate-pr

Orchestrate GitHub Actions Security

8/10

live-codes/pr-comment-from-artifact

Post PR Comment from Artifact

3/10

step-security/add-pr-comment/_next/static/chunks/webpack-8d35236cdc5be721.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10

infinitty35/nautilus_trader/.github/actions/common-setup

A high-performance algorithmic trading platform and event-driven backtester

7/10

jkroepke/setup-vals

Github Action for installing vals (https://github.com/helmfile/vals)

6/10

hashgraph/stablecoin-studio/.github/actions/install-and-build

All-in-one stablecoin configuration, issuance, and management

2/10

yonasbsd/grafana/.github/actions/changelog

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10

Maintained action available

chainguard-dev/actions/k8s-diag

A collection of reusable Github Actions workflows.

6/10

step-security/delete-deployment-environment/__builder_checkout_dir__/.github/actions/image

GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.

10/10