Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

yuya-takeyama/monotonix/actions/filter-jobs-by-dynamodb-state

Make deployment monotonous

4/10

Maintained action available

fortify/github-action/internal/set-fod-var-defaults

Fortify GitHub Actions

1/10

ai/copy-changelog-to-release

Create GitHub Releases based on latest record in `CHANGELOG.md` file

3/10

anchore/grype/.github/actions/bootstrap

A vulnerability scanner for container images and filesystems

6/10

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

7/10

step-security/sonarqube-scan-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

10/10

step-security/setup-vals/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

grafana/mimir-loki/.github/actions/image

Like Prometheus, but for logs.

0/10

dargon789/0xsequence.js/.github/actions/image

Sequence: modular web3 development platform and account abstraction stack for Ethereum chains

3/10

upbound/terraform/.github/actions/go-version

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

2/10