Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/claude-code-action/fill

Secure drop-in replacement for anthropics/claude-code-action.

10/10

grafana/grafana/.github/actions/change-detection

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10

grafana/kost/.github/actions/setup-goversion

K8s Cost Calculator that provides estimated reports for workloads running in Kubernetes.

5/10

step-security/release-drafter/image

Drafts your next release notes as pull requests are merged into master. Secure drop-in replacement for release-drafter/release-drafter.

10/10

kong/docs-plugin-toolkit/.github/reusable-steps/run-kong-ee

4/10

nvidia/onnxruntime/.github/actions/linux-web-init-and-check

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10

ozi-project/release

OZI action - build signed wheel and source releases

5/10

dustin4444/slsa-github-generator/.github/actions/secure-download-folder

Language-agnostic SLSA provenance generation for Github Actions

3/10

step-integration-tests/auto-pdpr-test-93245-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

miroapp/miro-react-hooks/.github/actions/setup

Collection of React Hooks wrappers for Miro WebSDK

3/10

step-security/esigner-codesign/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub Action for CodeSigner by SSL.com. Secure drop-in replacement for sslcom/esigner-codesign.

10/10

stakekit/safe-wallet-web/.github/workflows/build

Safe{Wallet} – smart contract wallet for Ethereum (ex-Gnosis Safe multisig)

3/10

sozercan/dynamo/.github/actions/teardown-dynamo-operator

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

elide-dev/aura/.github/actions/native-inputs

⌥ AI Coding agent for the terminal — hash-anchored edits, optimized tool harness, LSP, Python, browser, subagents, and more

4/10

saionaro/extract-package-version

GitHub Action that reads a package.json file and exposes its version field as a workflow output.

4/10

aerospike/aerospike-client-java-reactive/.github/actions/stage-release-artifacts

Reactive programming interfaces for the Aerospike Java client

6/10

step-security/action-shellcheck

GitHub action for ShellCheck. Secure drop-in replacement for ludeeus/action-shellcheck.

10/10

Maintained by StepSecurity

step-integration-tests/auto-pdpr-test-90987-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

huntridge-labs/argus/.github/actions/linter-terraform

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

bokuweb/reg-actions

A visual regression test tool for github actions :octocat:.

1/10