Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

isaac-sim/isaaclab/.github/actions/combine-results

Unified framework for robot learning built on NVIDIA Isaac Sim

6/10

cloudposse/github-action-matrix-outputs-write

Workaround implementation - Write matrix jobs outputs

4/10

togethercomputer/diffusers/.github/actions/setup-miniconda

🤗 Diffusers: State-of-the-art diffusion models for image and audio generation in PyTorch

3/10

igorjs/gh-actions-clean-workflow

Clean workflow run logs based on configuration

7/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_codescan_notification

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10

step-security/sonarqube-scan-action/public-layout.tsx

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

9/10

sonarsource/sonarqube-ide-visualstudio-roslyn/.actions/get-build-number

Plugin using the Plugin API to allow Roslyn integration between SonarQube for Visual Studio and SLCore..

7/10

grafana/community-contributions/.github/actions/setup-enterprise

External contributor PR workflow testing sandbox

2/10

step-security/needs-attention

A GitHub Action for managing issues that require attention. Secure drop-in replacement for hramos/needs-attention.

10/10

Maintained by StepSecurity

daniel-graham/mcp-compressor/.github/actions/setup-python-env

An MCP server wrapper for reducing tokens consumed by MCP tools.

2/10

sonarsource/gh-action_setup-cloudflare-warp/.github/actions/fill

Setup Cloudflare WARP with device posture check and inspection certificate for secure network access.

4/10

actions-ecosystem/action-release-label

🏷️ GitHub Action to output a semver update level from a pull request release label

3/10

nvidia/numba-cuda/.github/actions/sccache-summary

The CUDA target for Numba

6/10

passy/extract-version-commit

2/10

launchdarkly/dotnet-cache/.github/actions/image

Portable caching library for .NET

4/10

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/get-env-details

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

6/10

step-security/setup-qemu-action/_next/static/chunks/82372-3e0f97fa2fb178cc.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

8/10

rudderlabs/terraform-provider-rudderstack/.github/actions/%5c%5c%5c%22https%3a/rudderstack.com%5c%5c%5c%22%5cu003e%5cu003cimg

4/10

Maintained action available

dustin4444/electron/src/electron/.github/actions/fix-sync

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

5/10

Maintained action available

approved-3rd-party-actions/r-lib-actions/setup-tinytex

GitHub Actions for the R community

3/10