Assess the risk of third-party GitHub Actions

sonarsource/ci-github-actions/config-maven

CI/CD GitHub Actions

yonasbsd/spin/.github/actions/spin-ci-dependencies

Spin is the open source developer tool for building and running serverless applications powered by WebAssembly.

gradio-app/github/actions/comment-pr

github helpers for gradio repos!

0/10

ministryofjustice/hmpps-sre-python-lib/.github/actions/run-pytest

A library of commonly-used Python scripts and libraries for the SRE team (bootstrapped 2025-11-14)

coveo/ui-kit/.github/actions/changeset-merge-guard

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

step-integration-tests/auto-pdpr-test-57545-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

crazy-max/ghaction-upx

GitHub Action for UPX, the Ultimate Packer for eXecutables

bryan-roe/aria/.github/actions/validate-foundry-config

Aria: An Automatic AI system designed to innovate and simplify tasks with intelligence. Explore cutting-edge artificial intelligence in Python.

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/themes/hestia-will-2/assets/bootstrap/js/bootstrap.min.js

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

wolfi-dev/actions/wolfictl-update-gh

A collection of reusable Github Actions workflows.

8/10

paddlehq/ghokin/.github/actions/automerge-skipped-comment

Formatter for Gherkin feature files.

3/10

nvidia/aicr/.github/actions/load-versions

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

redpanda-data/redpanda/ghca/actions/buildkite-slash-commands

Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!

4/10

blinqas/tf-plan-pr-comment

grafana/database-plugin-tools/.github/actions/check-labels

Create Grafana plugins with ease.

4/10

codecov/codecov-action

GitHub Action that uploads coverage to Codecov :open_umbrella:

8/10

azure/get-keyvault-secrets

Automate your GitHub workflows using Azure Action for Key Vault

softprops/action-gh-release/_next/static/chunks/14233-9c198ef6720a7bc6.js

📦 :octocat: GitHub Action for creating GitHub Releases