Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/setup-bun/__builder_checkout_dir__/.github/actions/public-layout.tsx
Set up your GitHub Actions workflow with a specific version of Bun. Secure drop-in replacement for oven-sh/setup-bun.
peter-murray/setup-detekt
GitHub Action for resolving and installing a specific version of detekt on a GitHub Actions Runner.
step-security/action-slack
Provides the function of slack notification to GitHub Actions. Secure drop-in replacement for 8398a7/action-slack.
actions-ecosystem/action-add-labels
๐ท๏ธ GitHub Action to add labels
docker-library/bashbrew
Canonical parsing tool for the official images library files
softprops/action-gh-release/_next/static/chunks/96072-86eb6cfe9c58f0b8.js
๐ฆ :octocat: GitHub Action for creating GitHub Releases
google-github-actions/auth/fill
A GitHub Action for authenticating to Google Cloud.
chronograph-pe/stale
Marks issues and pull requests that have not had recent interaction
kong/datadog
Send Datadog metrics, events, service checks and logs from GitHub workflows
xom9ikk/split
Github Action for splitting strings into parts by separator with limit
ministryofjustice/laa-data-access-api/.github/actions/deploy_branch
osdkdev/unlock-issues
GitHub action for issue unlocking!
kaisugi/action-regex-match
GitHub Action to do regex matching
blockful/.github/actions/clickup-api
step-security/sbom-action/fill
GitHub Action for creating software bill of materials using Syft. Secure drop-in replacement for anchore/sbom-action.
step-security/setup-rust-toolchain/__builder_checkout_dir__/.github/actions/fill
Setup a specific Rust toolchain with extra features like problem matchers. Secure drop-in replacement for actions-rust-lang/setup-rust-toolchain.
devantler-tech/ksail/.github/actions/fill
All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.
step-security/post-run-action
This action runs a script in the post process. It is assumed that it will be called and used with a composite action that cannot perform post processing. Secure drop-in replacement for srz-zumix/post-run-action.
reviewdog/action-detect-secrets
GitHub Action: Run detect-secrets with reviewdog
goplus/setup-xgo
Set up your GitHub Actions workflow with a specific version of XGo