Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

grafana/athena-datasource/actions/commands

grafana/athena-datasource/actions/commands

8/10
anc95/ChatGPT-CodeReview

anc95/ChatGPT-CodeReview

🐥 A code review bot powered by ChatGPT

3/10
step-security/semver-utils/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

step-security/semver-utils/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

One-stop shop for working with semantic versions in your GitHub Actions workflows. Secure drop-in replacement for madhead/semver-utils.

10/10
coveo/platform-client/.github/actions/merge-commit

coveo/platform-client/.github/actions/merge-commit

Official Coveo Cloud APIs JavaScript Client

6/10
WyriHaximus/github-action-next-semvers

WyriHaximus/github-action-next-semvers

Github Action that output the next version for major, minor, and patch version based on the given semver version.

4/10
gaborcsardi/quarto-actions/setup

gaborcsardi/quarto-actions/setup

3/10
ericcornelissen/git-tag-annotation-action

ericcornelissen/git-tag-annotation-action

GitHub Actions Action to get git tag annotations

5/10
pytorch/torchft/test-infra/.github/actions/pull-docker-image

pytorch/torchft/test-infra/.github/actions/pull-docker-image

Fault tolerance for PyTorch (HSDP, LocalSGD, DiLoCo, Streaming DiLoCo)

7/10
rudderlabs/pr-description-enforcer

rudderlabs/pr-description-enforcer

3/10
JoftheV/workers-sdk/.github/actions/expose-actions-variables

JoftheV/workers-sdk/.github/actions/expose-actions-variables

⛅️ Home to Wrangler, the CLI for Cloudflare Workers®

3/10
step-security/setup-yq/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/setup-yq/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Sets up YQ, yet-another-markup-language-query-er, for use in your Github Actions workflow. Secure drop-in replacement for chrisdickinson/setup-yq.

10/10
ljharb/actions/node/pack

ljharb/actions/node/pack

GitHub actions I use for CI.

4/10
step-security/action-tflint

step-security/action-tflint

Run tflint with reviewdog on pull requests to enforce best practices. Secure drop-in replacement for reviewdog/action-tflint.

10/10
Maintained by StepSecurity
yepcode/gha-copy-team

yepcode/gha-copy-team

YepCode Copy Team GitHub Action

4/10
slsa-framework/slsa-github-generator/.github/actions/detect-workflow

slsa-framework/slsa-github-generator/.github/actions/detect-workflow

Language-agnostic SLSA provenance generation for Github Actions

5/10
GoogleCloudPlatform/functions-framework-conformance/action

GoogleCloudPlatform/functions-framework-conformance/action

A Tool for Validating Conformance to the Functions Framework Contract

3/10
netlify/actions/cli

netlify/actions/cli

6/10
octodemo-resources/github-url-resolver-action

octodemo-resources/github-url-resolver-action

GitHub Action to resolve URLs that are associated with a specific GitHub instance

3/10
dagster-io/dagster-cloud-action/actions/utils/prerun

dagster-io/dagster-cloud-action/actions/utils/prerun

3/10
grafana/setup-k6-action

grafana/setup-k6-action

GitHub Action for installing Grafana k6

7/10