Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/dotenv

GitHub Action to read .env file and add variables to GITHUB_ENV. Secure drop-in replacement for xom9ikk/dotenv.

8/10

Maintained by StepSecurity

ministryofjustice/money-to-prisoners-bank-admin/.github/actions/clean-ecr

Bank Admin – SSCL staff facing site for Prisoner Money suite of apps

8/10

anysphere/docker-cache

Cache Docker Images Whether Built or Pulled

2/10

roadiehq/backstage-entity-validator

Validate properties and well known annotations in your Backstage catalog-info.yaml files.

3/10

fortify/github-action/internal/run-script/js

Fortify GitHub Actions

3/10

Maintained action available

mevisoft/formbricks/.github/actions/public-layout.tsx

4/10

Maintained action available

authzed/action-spicedb-validate

GitHub Action for validating your SpiceDB schema

4/10

actions-security-demo/script-injection/actions/fill

2/10

step-security/changed-files/__builder_checkout_dir__/.github/actions/privacy-check

Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories. Secure drop-in replacement for tj-actions/changed-files.

9/10

scottbrenner/cfn-lint-action

GitHub Action for interacting with CloudFormation Linter

7/10

yonasbsd/linkerd2/.github/actions/cli-setup

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

5/10

Maintained action available

nvidia-nemo/automodel/.github/actions/build-container

🚀 Pytorch Distributed native training library for LLMs/VLMs with OOTB Hugging Face support

8/10

at-wat/go-sum-fix-action

GitHub Action to update go.sum. (Mainly for working with Renovate Bot which sometimes lacks package sum.)

4/10

insightsengineering/pip-action

Github Action to install Python PIP packages 🐍 📦

4/10

step-security/action-gh-release/__builder_checkout_dir__/.github/actions/compute-sha256

GitHub Action for creating GitHub Releases. Secure drop-in replacement for softprops/action-gh-release.

10/10

turbocoder13/py-lintro/.github/actions/pages-deploy

Making linters play nice... Mostly.

7/10

vendic/magento2-oh-dear-elasticsuite/.github/actions/image

Add Elasticsuite checks to Vendic/magento2-oh-dear

2/10

launchdarkly/lua-server-sdk/.github/actions/public-layout.tsx

LaunchDarkly Server-Side SDK for Lua

5/10

caphyon/advinst-github-action

GitHub action for Advanced Installer tool

2/10

googlecloudplatform/github-actions

A GitHub Action for installing and configuring the gcloud CLI.

6/10