Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/protobuf-ci/bazel-docker

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

step-security/repo-file-sync-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories. Secure drop-in replacement for BetaHuhn/repo-file-sync-action.

10/10

fsouza/fake-gcs-action

GitHub Action for running fake-gcs-server in a dettached container in background.

4/10

Maintained action available

mfem/github-actions/build-metis

One repo for all mfem GitHub Actions

4/10

espressif/github-actions/upload_components

Github Actions developed/used by Espressif

2/10

necojackarc/auto-request-review

A GitHub Action that automatically requests review of a pull request based on files changes and/or groups the author belongs to 🤖

3/10

Git-Hub-Chris/FreeCAD/.github/workflows/actions/runCPPTests/runAllTests

Open source 3D modeler.

5/10

Maintained action available

coursier/cache-action

GitHub action to save / restore the coursier cache of your build

6/10

prefix-dev/setup-pixi

GitHub Action to set up pixi :octocat: 📦

8/10

yonasBSD/wazuh/.github/actions/5_builderpackage_get-last-stable-version

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/wp-content/uploads/2018

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

breathingdust/github-team-slackbot

2/10

jake-scott/go-test-coverage

go-test-coverage is tool and github action which reports issues when test coverage is below set threshold

3/10

eliheady/dnscontrol-action-experiment

4/10

CycloneDX/gh-gomod-generate-sbom

GitHub action to generate a CycloneDX SBOM for Go modules

5/10

yonasBSD/mimir/actions/backport

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

3/10

Maintained action available

hiero-ledger/hiero-mirror-node/.github/actions/k6

Hiero Mirror Node archives data from consensus nodes and serves it via an API

8/10

cpcloud/compare-commits-action

Compare the differences between two commits

2/10

vegardit/gha-setup-yq

gha-setup-yq is a GitHub action to install the yq command line YAML parser.

4/10

adaptive-enforcement-lab/readability

Documentation readability analyzer - GitHub Action and CLI tool for measuring content quality metrics

7/10