Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

1Password/check-signed-commits-action

GitHub Action to check PRs for signed commits

4/10

sigstore/cosign-installer

Cosign Github Action

8/10

Kong/public-shared-actions/pr-previews/cleanup

Shared actions available to both public and private repositories

6/10

step-security/zip-release/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub action that can be used to create release zip archive. Secure drop-in replacement for TheDoctor0/zip-release.

10/10

SonarSource/sonarcloud-github-c-cpp

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

6/10

step-security/helm-gh-pages

A GitHub Action for publishing Helm charts to Github Pages. Secure drop-in replacement for stefanprodan/helm-gh-pages.

10/10

Maintained by StepSecurity

ScribeMD/docker-cache

Cache Docker Images Whether Built or Pulled

3/10

clowdhaus/terraform-composite-actions/pre-commit

Contains composit GitHub actions for use with Terraform AWS Module workflows

4/10

ministryofjustice/hmpps-probation-integration-services/.github/actions/format-code

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

reviewdog/action-pyflakes

Run pyflakes with reviewdog 🐶

3/10

autotelic/action-wait-for-status-check

A GitHub action that waits for a specified Github Status Check to complete

3/10

jmertic/lfx-landscape-tools

Tools for updating a landscape from LFX

7/10

h0x0er/actions-runner-controller/.github/actions/execute-assert-arc-e2e

Kubernetes controller for GitHub Actions self-hosted runners

3/10

coveo/ui-kit/.github/actions/e2e-atomic-search-vuejs

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

humbletim/install-vulkan-sdk

Automatically downloads and installs prebuilt Vulkan SDK releases.

4/10

pkgdeps/git-tag-action

[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository.

3/10

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

7/10

mbrobbel/rustfmt-check

GitHub Action to format Rust code using rustfmt

2/10

step-security/setup-gcloud

A GitHub Action for installing and configuring the gcloud CLI. Secure drop-in replacement for google-github-actions/setup-gcloud.

10/10

Maintained by StepSecurity

equinor/fusion-project-portal/.github/actions/client-test

Project Portal powered By Fusion

4/10