Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
kong/terragrunt-action
GitHub action for setting up Terragrunt https://terragrunt.gruntwork.io
pietrobolcato/action-read-yaml
Custom github action used to read yaml files, supporting multiple keys and variable replacements
caffeelake/arrow/arrow/.github/actions/sync-nightlies
Apache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics
tanker187/next.js/.github/actions/image
The React Framework
eball/write-tag-to-version-file
A GitHub Action that fetches the latest git tag within a repo and writes this to a file.
kong/gateway-operator/.github/actions/setup-mise
Kubernetes Operator for Kong Gateways
jsumners-nr/gha-node-deps-divergent
A GitHub action to determine if Node.js dependencies have changed between a PR and the branch it is based upon.
elastic/docs-builder/actions/validate-path-prefixes-local
step-security/swiftylab-ci/__builder_checkout_dir__/.github/actions/privacy-check
Support files and configurations for SwiftyLab's CI. Secure drop-in replacement for SwiftyLab/ci.
aerospike/aerospike-client-go/.github/actions/fill
Aerospike Client Go
step-security/action-branch-name
Github action to enforce naming convention on branch names. Secure drop-in replacement for deepakputhraya/action-branch-name.
approved-3rd-party-actions/expo-github-action/.github/actions/setup
Expo GitHub Action makes it easy to automate EAS builds or updates
step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact
Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.
chainguard-actions/test-summary-action
caffeelake/openbao/.github/actions/fill
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
philips-software/amp-devcontainer/.github/actions/public-layout.tsx
๐amp-devcontainer is a batteries-included devcontainer useable for modern software development
yonasbsd/strapi/.github/actions/image
๐ Strapi is the leading open-source headless CMS. Itโs 100% JavaScript/TypeScript, fully customizable and developer-first.
tempoxyz/gh-actions/vendor/dtolnay/fill
Reusable GitHub Actions for Tempo
chainguard-dev/actions/apko-build
A collection of reusable Github Actions workflows.
caffeelake/cilium/.github/actions/kind-external-targets
eBPF-based Networking, Security, and Observability