Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/action-add-labels/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

step-security/action-add-labels/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

🏷️ GitHub Action to add labels. Secure drop-in replacement for actions-ecosystem/action-add-labels.

10/10
Homebrew/actions/limit-pull-requests

Homebrew/actions/limit-pull-requests

🚀 Homebrew's GitHub Actions

7/10
FranzDiebold/github-env-vars-action

FranzDiebold/github-env-vars-action

:octocat: 🚀 GitHub Action for Environment Variables

3/10
creshpay/action-gpg

creshpay/action-gpg

Github Action to enable GPG signature within Github Action Workflows

4/10
gradle/gradle-enterprise-build-validation-scripts/.github/actions/gradle/experiment-3

gradle/gradle-enterprise-build-validation-scripts/.github/actions/gradle/experiment-3

Executable scripts to assist in validating that your Gradle and Maven builds are in an optimal state in terms of maximizing work avoidance when using Develocity.

7/10
andybelltree/lcov-reporter-action

andybelltree/lcov-reporter-action

Comments a pull request with the code coverage generated by your tests.

2/10
release-plz/git-config

release-plz/git-config

GitHub action to configure the git user from a GitHub token

3/10
elastic/oblt-actions/updatecli/install

elastic/oblt-actions/updatecli/install

7/10
Kong/public-shared-actions/pr-previews/validate

Kong/public-shared-actions/pr-previews/validate

Shared actions available to both public and private repositories

6/10
elastic/kibana/actions/permission-check

elastic/kibana/actions/permission-check

Your window into the Elastic Stack

6/10
equinor/fusion-project-portal/.github/actions/client-test-coverage

equinor/fusion-project-portal/.github/actions/client-test-coverage

Project Portal powered By Fusion

4/10
step-security/action-gh-release/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/action-gh-release/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub Action for creating GitHub Releases. Secure drop-in replacement for softprops/action-gh-release.

10/10
nordicbuilder/action-script-diff

nordicbuilder/action-script-diff

DEPRECATED - please use action from nrfconnect org

2/10
authelia/authelia/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

authelia/authelia/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

8/10
tanmay-pathak/generate-pull-request-description

tanmay-pathak/generate-pull-request-description

A GitHub action that updates PR descriptions from Conventional Commits

3/10
sysdiglabs/scan-action

sysdiglabs/scan-action

Inline Image Scan Github Action

6/10
rapidsai/cudf/shared-actions/telemetry-impls/github-actions-job-info

rapidsai/cudf/shared-actions/telemetry-impls/github-actions-job-info

cuDF - GPU DataFrame Library

7/10
clechasseur/rs-cargo

clechasseur/rs-cargo

📦 GitHub Action for Rust `cargo` command

7/10
mnao305/chrome-extension-upload

mnao305/chrome-extension-upload

upload & publish extensions to the Chrome Web Store.

3/10
ggml-org/free-disk-space

ggml-org/free-disk-space

:octocat:⚙️🗑️ A GitHub Action to free disk space on an Ubuntu runner.

3/10