Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

docker/setup-docker-action

GitHub Action to set up (download and install) Docker CE

7/10

approved-3rd-party-actions/kover-report

Github action that publishes the Kover code coverage report as a comment in pull requests

2/10

honeycombio/oss-management-actions/projects

A set of GitHub Actions to apply a common set of OSS management workflows to Honeycomb projects.

4/10

wolfi-dev/wolfi-act

Dynamic GitHub Actions from Wolfi packages

7/10

andife/openvino/openvino/.github/actions/system_info

OpenVINO™ is an open source toolkit for optimizing and deploying AI inference

3/10

google/mirror-branch-action

A Github Action to mirror one branch to another within the same repository

3/10

edumserrano/find-create-or-update-comment

A composite GitHub action that can be used to create or update a GitHub issue/pull request comment.

4/10

matchai/waka-box

📊 Update a pinned gist to contain your weekly WakaTime stats

2/10

coveo/ui-kit/.github/actions/playwright-atomic-search-commerce-angular

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

product-os/flowzone/.github/actions/publish

Reusable, opinionated, zero-conf workflows for GitHub actions

5/10

Maintained action available

fundacaocerti/mobsf-action

GitHub Actions for MobSF

3/10

caffeelake/serenity/.github/actions/cache-save

The Serenity Operating System 🐞

5/10

zricethezav/gitleaks-action

Protect your secrets using Gitleaks-Action

1/10

kishikawakatsumi/xcresulttool

A GitHub Action that generates a human-readable test report from the Xcode result bundle and shows it on GitHub Checks.

4/10

datadog/test-visibility-github-action

GitHub Action that installs Datadog Test Visibility

6/10

actions/configure-pages

An action to enable Pages and extract various metadata about a site. It can also be used to configure various static site generators we support as starter workflows.

7/10

caffeelake/onnxruntime/.github/actions/macos-ci-setup

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10

dudinea/argo-cd/__builder_checkout_dir__/.github/actions/secure-download-artifact

Declarative Continuous Deployment for Kubernetes

5/10

Maintained action available

gittools/actions/gitversion/setup

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

6/10

oddstr13/jellyfin-plugin-repository-manager

A repository manager for Jellyfin plugins

5/10

Maintained action available