Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

imaralabs-ai/coder/.github/actions/test-cache/upload

Secure environments for developers and their agents

4/10

sorenlouv/backport-github-action

Backport CLI tool as a Github Action

3/10

Maintained action available

step-security/setup-buildx-action/_next/static/chunks/95895-9e8f8d44bb9fd513.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

contrast-security-oss/cibuildwheel

🎡 Build Python wheels for all the platforms with minimal configuration.

4/10

synchronal/hex-publish-action

Publish an existing package to hex.pm when the version changes.

2/10

step-integration-tests/auto-pdpr-test-92980-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/dsanders11-project-actions/image

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10

nvidia/jax-toolbox/.github/actions/fill

JAX-Toolbox

6/10

neondatabase/neondb-cli/.github/actions/prepare

Monorepo for Neon's open-source SDKs, libraries, CLIs, and framework plugins

5/10

Maintained action available

caffeelake/llvm-project/workflows/.github/workflows/release-binaries-setup-stage

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

3/10

Maintained action available

philips-labs/list-folder-action

Get a list of folders in a directory and return them as a json list

4/10

ministryofjustice/laa-submit-a-bulk-claim/.github/actions/deploy_branch

Web application for bulk upload of claims data

8/10

grafana/shared-workflows/_shared-workflows-dockerhub-login/actions/get-vault-secrets

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

v1vhm/github-repo-provisioning/.github/actions/get-gh-app-token

2/10

dawidd6/action-send-mail/_next/static/chunks/37049-fb8098a7811b0c13.js

:gear: A GitHub Action to send an email to multiple recipients

5/10

Maintained action available

anchore/workflows/.github/actions/binny

reusable workflows to be used for the oss projects

7/10

tomasreyes/node/.github/actions/undici-wpt-current

Node.js JavaScript runtime ✨🐢🚀✨

4/10

Maintained action available

pytorch/test-infra/test-infra/.github/actions/chown-directory

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

step-integration-tests/auto-pdpr-test-38516-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

kong/slsa-generator/__builder_checkout_dir__/.github/actions/create-container_based-predicate

Language-agnostic SLSA provenance generation for Github Actions

3/10