Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

boa-dev/criterion-compare-action

⚡️📊 Compare the performance of Rust project branches

4/10

step-security/publish-unit-test-result-action/misc/action/json-output

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

10/10

grafana/plugin-ci-workflows/actions/plugins/publish/check-artifacts

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

7/10

grafana/plugin-ci-workflows/actions/internal/plugins/setup

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

7/10

grafana/security-github-actions/trivy

Repo for Security related GitHub Actions CI automation

8/10

step-security/quarto-actions/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10

step-security/action-semantic-demo

8/10

grafana/x-ray-datasource/actions/commands

AWS X-Ray data source

7/10

navikt/automerge-dependabot

This action automatically merges pull requests created by Dependabot with a set of configurable rules.

7/10

step-security/publish-crates/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub action to get easy publishing of Rust crates. Secure drop-in replacement for katyo/publish-crates.

10/10

JasonEtco/create-an-issue

A GitHub Action for creating a new issue from a template file.

3/10

pytorch/torchrec/test-infra/.github/actions/setup-ssh

Pytorch domain library for recommendation systems

3/10

Maintained action available

pytorch/executorch/test-infra/.github/actions/upload-artifact-s3

On-device AI across mobile, embedded and edge for PyTorch

4/10

Maintained action available

EPMatt/reviewdog-action-prettier

Run Prettier with reviewdog :dog:

3/10

grafana/mimir-loki/lib/actions/should-release

Like Prometheus, but for logs.

3/10

NVIDIA/cuda-python/.github/actions/get_pr_number

CUDA Python: Performance meets Productivity

7/10

microsoft/powerplatform-actions

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

6/10

pyTooling/Actions/with-post-step

Reusable steps and workflows for GitHub Actions

4/10

Maintained action available

aws-actions/aws-cloudformation-github-deploy

Deploys AWS CloudFormation Stacks

6/10

paloaltonetworks/prisma-cloud-scan

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud

4/10