Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

grafana/github-actions-testrepo/actions/backport

5/10

rapidsai/node/.github/actions/fill

GPU-accelerated data science and visualization in node

3/10

reearth/actions/deploy-cloud-run-with-tag

Collection of actions and reusable workflows for GitHub Actions.

4/10

step-security/setup-qemu-action/_next/static/chunks/88447-8031e8e6802c7131.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

10/10

step-integration-tests/auto-pdpr-test-73566-9/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

yonasbsd/codeql/.github/actions/fill

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

3/10

Maintained action available

bojanrajh/workflow-telemetry-action

Github action to collect metrics (CPU, memory, I/O, etc ...) from your workflows to help you debug and optimize your CI/CD pipeline

2/10

step-security/action-staticcheck/__builder_checkout_dir__/.github/actions/secure-download-artifact

🐶 Run staticcheck with reviewdog on pull requests to improve code review experience. Secure drop-in replacement for reviewdog/action-staticcheck.

10/10

check-spelling/check-spelling/.git/check-spelling-actions/checkout-merge

Spelling checker action to check spelling in repositories / pull requests / commits

5/10

coveo/ui-kit/.github/actions/e2e-atomic

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

step-security/lock-threads/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action that locks closed issues, pull requests and discussions after a period of inactivity. Secure drop-in replacement for dessant/lock-threads.

10/10

step-integration-tests/auto-pdpr-test-43680-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

fortify/github-action/internal/sc-sast-logout

Fortify GitHub Actions

1/10

ai-dynamo/aiconfigurator/.github/actions/build-platform-wheel

Offline optimization of your disaggregated Dynamo graph

7/10

vvakame/github-actions/vote-checker

2/10

posthog/posthog/.github/actions/build-n-cache-image

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10

Maintained action available