Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

adyen/adyen-platform-experience-web/.github/actions/setup-env

Adyen Platform Experience components

7/10

crowdin/github-action

A GitHub action to manage and synchronize localization resources with your Crowdin project

6/10

step-security/upload-release-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Upload files to a GitHub release. Secure drop-in replacement for svenstaro/upload-release-action.

9/10

dustin4444/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-go

Language-agnostic SLSA provenance generation for Github Actions

3/10

step-security/terraform-cloud-provider-publish

An action for publishing terraform providers to a private registry. Secure drop-in replacement for thechrisjohnson/terraform-cloud-provider-publish.

8/10

Maintained by StepSecurity

gaphor/gaphor

Gaphor is the simple modeling tool

4/10

Maintained action available

christian-draeger/read-properties

Github action to read java properties files

5/10

montyd/package-json-updated-action

A GitHub Action which indicates when the package.json version has updated in the most recent commit

2/10

lfreleng-actions/python-project-name-action

Extracts Python project name and derives the package name

6/10

intel/cve-bin-tool-action

Known vulnerability scanning for your GitHub repository using CVE Binary Tool. This Action can scan binaries, component lists and SBOMs for known vulnerabilities and CVEs. It can generate SBOM component lists as well as reports in the Security Tab and in HTML/JSON/PDF format.

6/10

amartyajha/airbyte/.github/actions/match-github-to-slack-user

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

0/10