Assess the risk of third-party GitHub Actions

jpribyl/action-docker-layer-caching

🐳 Enable Docker layer caching in GitHub Actions

kong/kong-operator/_ksai/.github/actions/public-layout.tsx

Kubernetes Operator for Kong Gateways

8/10

step-integration-tests/auto-pdpr-test-25038-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

pytorch/executorch/test-infra/.github/actions/fill

On-device AI across mobile, embedded and edge for PyTorch

Maintained action available

coveo/plasma/.github/actions/action-info.client.tsx

Plasma components implemented with React!

amilcarlucas/mypy-github-action

mypy github action

3/10

paddlehq/go-aws-ssm/.github/actions/image

Wraps the aws-sdk-go and hides the complexity of dealing with the not so Go friendly AWS SDK.

step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/privacy-check

Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.

9/10

ai-dynamo/dynamo/.github/actions/init-dynamo-builder

A Datacenter Scale Distributed Inference Serving Framework

Maintained action available

step-security/release-drafter/.github/actions/fill

Drafts your next release notes as pull requests are merged into master. Secure drop-in replacement for release-drafter/release-drafter.

10/10

step-security/s3-actions-cache/__builder_checkout_dir__/.github/actions/secure-download-artifact

Cache to S3 storage with official actions/cache@v2 fallback. Secure drop-in replacement for tespkg/actions-cache.

9/10

vendic/github-automerge-action

Github automerge action

0/10

step-integration-tests/auto-pdpr-test-28960-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

launchdarkly/go-server-sdk-consul/.github/actions/get-go-version

Consul integration for the LaunchDarkly SDK for Server-side Go

6/10

ministryofjustice/laa-data-claims-reporting-service/.github/get_release_name_to_delete

Java service to generate claims reports

8/10

celo-org/trivy-composite-action

Composite action for the Trivy scanning

ledgerhq/ledger-live/tools/actions/composites/update-snapshots-desktop

Mono-repository for Ledger Wallet apps and related packages

Maintained action available

shopware/swagpaypal/paypal/.github/actions/setup-paypal

PayPal integration for shopware/platform

nvidia/nodewright/.github/actions/cosign-sign-sbom

A Kubernetes Operator to manage Node OS customizations.