Assess the risk of third-party GitHub Actions

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-cleanup

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

6/10

yonasbsd/authentik/.github/actions/test-results

The authentication glue you need.

4/10

step-security/docker-build-push-action/_next/static/chunks/97904-01f2134615e51508.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/image

🛠️ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.

servicenow/sncicd-publish-app

aerospike/aerospike-client-nodejs/.github/actions/update-version

Node.js client for the Aerospike database

5/10

pr-annotators/mypy-pr-annotator

Annotate pull requests with mypy errors detected during CI

vendic/github-actions-setup-opensearch

An action for OpenSearch

goreleaser/goreleaser-action

GitHub Action for GoReleaser

7/10

vexxhost/docker-atmosphere/.github/actions/public-layout.tsx

Reusable GitHub Actions for building Atmosphere Docker images

4/10

threeal/cmake-action

Configure and build CMake projects on GitHub Actions

5/10

sonatype/actions

Public repository to keep Sonatype's GitHub Actions.

akashchi/download-artifact

shovon0203/docker-action

step-security/setup-buildx-action/_next/static/chunks/polyfills-42372ed130431b0a.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

step-integration-tests/auto-pdpr-test-06591-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

grafana/writers-toolkit/readability

Technical documentation guidelines for Grafana Labs documentation

eclipse-zenoh/ci/create-release-branch

GitHub Actions and workflows used across eclipse-zenoh

5/10

miroapp/miro-react-hooks/.github/actions/test

Collection of React Hooks wrappers for Miro WebSDK