Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
nvidia/aicr/.github/actions/prep-kind-runner
Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes
carabiner-dev/actions/install/ampel-bootstrap
GiitHub actions for various tools in the Carabiner ecosystems
chainguard-actions/snok-install-poetry
christian-korneck/delete-run-artifacts-action
github action to delete artifacts at the end of a workflow run
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/docker-setup-buildx-action
Mirror from https://github.com/docker/setup-buildx-action
windlasstech/actionlint-hardened-action
Docker-based GitHub Action for running actionlint with SHA-pinned images and Dependabot-managed updates.
touchlab/sample-group-sanity-check
Github action to do sanity check around org name and group id
ministryofjustice/opg-github-actions/actions/terraform-version
OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform
broadsage/container-images/.github/actions/discover-containers
Primary source of truth for the Broadsage Container Images
step-security/action-yamllint
GitHub Action - Yaml Lint. Secure drop-in replacement for ibiqlik/action-yamllint.
gurock/trcli-action
CI/CD integration
devantler-tech/ksail/.github/actions/restore-mirror-cache
All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.
timschoenle/portfolio/.github/actions/image
Dioxus fullstack (SSR + hydration) portfolio served by Axum.
octodemo/pull-request-review-action
coveooss/terraform/.github/actions/equivalence-test
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
openzeppelin/openzeppelin-contracts/.github/actions/storage-layout
OpenZeppelin Contracts is a library for secure smart contract development.
step-security/moon-ci-retrospect
This action is designed for projects using Moonrepo, making the test results of the moon ci command more readable in GitHub Actions logs. Secure drop-in replacement for appthrust/moon-ci-retrospect.
slsa-framework/slsa-github-generator/.github'/actions/secure-builder-checkout
Language-agnostic SLSA provenance generation for Github Actions
coveord/renovate/.github/actions/setup-node
Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io
sonarsource/sonar-php/gh-action_release/main
:elephant: SonarPHP: PHP static analyzer for SonarQube & SonarLint