Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

kminehart/dagger-for-github

GitHub Action for Dagger

3/10

archive/github-actions-slack

Github Action for sending message (and reactions/threads/update/blocks) to Slack - With support for Slack's optional arguments

6/10

accenture/autofixture.xunit2.automock/.github/actions/determine-next-version

Autofixture auto-mocking for XUnit2 using a mocking library of your choice.

8/10

cytracom/npm-get-version-action

This Action scans for a package.json file and reads the version number from that.

3/10

jurplel/install-qt-action/action

Install Qt on your Github Actions workflows with just one simple action

4/10

Maintained action available

pytorch/ao/test-infra/.github/actions/setup-binary-upload

PyTorch native quantization and sparsity for training and inference

2/10

Maintained action available

okteto/build

Github action to build images using Okteto

5/10

skylinecommunications/_reusableworkflows/.github/actions/quality-gate-summary

Skyline DataMiner Reuseable Workflows

4/10

Maintained action available

actions/upload-artifact

6/10

step-security/ghaction-setup-containerd/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to set up containerd. Secure drop-in replacement for crazy-max/ghaction-setup-containerd.

10/10

yonasbsd/opendal/.github/actions/test_behavior_core

Apache OpenDAL: access data freely.

3/10

Maintained action available

adrise/matter-casting/.github/actions/bootstrap

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

5/10

Maintained action available

useblacksmith/stickydisk-delete

1/10

step-security/github-releases-to-discord/__builder_checkout_dir__/.github/actions/privacy-check

Posts a GitHub Release changelog to a specified Discord channel. Secure drop-in replacement for sethcohen/github-releases-to-discord.

10/10

step-security/action-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

10/10

Maintained by StepSecurity

rudderlabs/terraform-provider-rudderstack/.github/actions/%5c%5c%5c%22https%3a/registry.terraform.io/providers/rudderlabs/rudderstack/latest/docs%5c%5c%5c%22%5cu003edocumentation%5cu003c/a%5cu003e%5c%5cr%5c%5cn

4/10

Maintained action available

envoyproxy/toolshed/gh-actions/envoy/ci/request

6/10

step-security/gradle-actions/dependency-submission

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub. Secure drop-in replacement for gradle/actions.

10/10

Maintained by StepSecurity

socketdev/action

GitHub Action to run Socket in CLI or Firewall mode

4/10

intel/ai-containers/test-runner

This repository contains Dockerfiles, scripts, yaml files, Helm charts, etc. used to scale out AI containers with versions of TensorFlow and PyTorch that have been optimized for Intel platforms. Scaling is done with python, Docker, kubernetes, kubeflow, cnvrg.io, Helm, and other container orchestration frameworks for use in the cloud and on-premise

5/10