Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

pytorch/data/test-infra/.github/actions/setup-binary-upload

A PyTorch repo for data loading and utilities to be shared by the PyTorch domain libraries.

4/10

Maintained action available

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/themes/hestia-will-2/assets/js/material.js

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

project-tick/project-tick/.github/actions/setup-dependencies/windows

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

5/10

celo-org/developer-tooling/.github/actions/upload-codecov

🛠️ SDKs and CLI for interacting with Celo

5/10

step-security/protobuf-ci/../../_actions/current/internal/setup-runner

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

sonarsource/sonar-lits/.actions/get-build-number

Language plugins Integration Tests Support

5/10

Maintained action available

step-security/edit-release

A GitHub Action for editing an existing release. Secure drop-in replacement for irongut/EditRelease.

10/10

Maintained by StepSecurity

templum/govulncheck-action

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

2/10