Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

modeseven-lfreleng-actions/draft-release-promote-action

Promotes a draft release to full release status

4/10

Maintained action available

aerospike/aerospike-client-python/.github/actions/run-ee-server

Aerospike Python Client

4/10

Maintained action available

ministryofjustice/laa-amend-a-claim/.github/actions/sanitize-branch-name

Amend a claim is a Spring Boot web application that enables Legal Aid Agency caseworkers to perform escape case assessments on claims submitted via Submit a Bulk Claim.

8/10

boostsecurityio/poutine-action

6/10

finnp/create-file-action

Github Action to create a new file from environment config

2/10

ministryofjustice/laa-crime-equinity-historical-data/.github/actions/build-app-gradle

Provide view access to historical data from Equinity

7/10

coveord/spinnaker/.github/actions/publish-halconfig

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

geomais/sql-guardian

0/10

step-security/readmeio-rdme

ReadMe's official command-line interface (CLI) and GitHub Action 🌊. Secure drop-in replacement for readmeio/rdme.

10/10

Maintained by StepSecurity

step-security/protobuf-ci/checkout

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

dflook/terraform-apply

GitHub action to apply terraform plans

2/10

openzeppelin/moonbeam/.github/workflow-templates/dev-tests

An Ethereum-compatible smart contract parachain on Polkadot

2/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/version_history

Shared actions for Github workflows to use PUT NO WORKFLOWS IN HERE! (except security scanning ones) (bootstrapped 2026-03-30)

4/10

jfrog/.github/actions/install-go-with-cache

4/10

Maintained action available

zedthree/clang-tidy-review/post

Create a pull request review based on clang-tidy warnings

4/10

ljharb/actions/node/matrix

GitHub actions I use for CI.

4/10

docker-compose-linter/dclint-github-action

GitHub Action for DCLint. Supports GitHub Annotations and integration with Reviewdog.

2/10

ministryofjustice/serve-opg/.github/workflows/_notify-slack.yml

Serve OPG: Managed by opg-org-infra & Terraform

6/10

09168806659/metaplex-program-library/.github/actions/list-changed-files

Smart contracts maintained by the Metaplex team

2/10

github/command

IssueOps commands in GitHub Actions

5/10