Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/codacy-coverage-reporter-action/_next/static/chunks/77639-743ab202668d2b6b.js

GitHub Action for the codacy-coverage-reporter. Secure drop-in replacement for codacy/codacy-coverage-reporter-action.

10/10

step-security/trinodb-github-actions/fill

Github actions used in the Trino project. Secure drop-in replacement for trinodb/github-actions.

8/10

kategengler/put-built-npm-package-contents-on-branch

An action to build an npm package and push it's contents to a branch

3/10

indygreg/actions/indygreg-actions/rust-bootstrap

GitHub Actions tailored for shared use among my projects

2/10

step-security/create-pull-request/__builder_checkout_dir__/.github/actions/public-layout.tsx

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

magrhino/wud-updater/.github/actions/setup-node-env

Reviewable Docker Compose updates powered by What's Up Docker.

7/10

step-security/vitest-coverage-report-action/__builder_checkout_dir__/.github/actions/image

A GitHub Action to report vitest test coverage results. Secure drop-in replacement for davelosert/vitest-coverage-report-action.

10/10

surrealdb/surrealdb/.github/actions/quality-check-wasm

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

grafana/grafana-github-actions-go/removemilestone

Grafana GitHub Actions in Golang

6/10

redpanda-data/connect/.github/actions/upload_managed_plugin

Fancy stream processing made operationally mundane

4/10

Maintained action available

jahid11978/next.js/.github/actions/setup-datadog-ci

The React Framework

3/10

Maintained action available

vocera-ai/vocera-run-test-manual

0/10

blackducksoftware/github-action

Synopsys Detect integration with Github Actions

3/10

launchdarkly/php-server-sdk-redis-predis/.github/actions/fill

Redis integration for the LaunchDarkly SDK for Server-side PHP using predis

4/10

coinbase/x402/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

A payments protocol for the internet. Built on HTTP.

4/10

lalita-suthimoon/generative-ai/../check-spelling-actions/checkout

Sample code and notebooks for Generative AI on Google Cloud, with Gemini on Vertex AI

3/10

crc-org/crc-github-action

GitGub Action to setup a single-node OpenShift or MicroShift cluster using CRC

3/10

step-security/gh-find-current-pr/__builder_checkout_dir__/.github/actions/privacy-check

Github Action for finding the Pull Request (PR) associated with the current SHA. Secure drop-in replacement for jwalton/gh-find-current-pr.

9/10

grafana/shared-workflows/_shared-workflows-trigger-argo-workflow/actions/image

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

tempoxyz/gh-actions/vendor/taiki-e/install-action

Reusable GitHub Actions for Tempo

4/10

Maintained action available