Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

v7labs/ssh-agent-gha

GitHub Action to setup `ssh-agent` with a private key

3/10

equinor/segyio/.github/actions/benchmark

Fast Python library for SEGY files.

4/10

nvidia/numba-cuda-mlir/.github/actions/fetch_ctk

repo for Numba-CUDA-MLIR

7/10

step-security/close-milestone/security/fill

A Github action to remove a milestone by the milestone's name. Secure drop-in replacement for Akkjon/close-milestone.

10/10

openai/codex/.github/actions/run-argument-comment-lint

Lightweight coding agent that runs in your terminal

6/10

canonical/action-build

A Github action for building Snapcraft projects

2/10

step-security/github-tag-action/__builder_checkout_dir__/.github/actions/privacy-check

A Github Action to automatically bump and tag master, on merge, with the latest SemVer formatted version. Works on any platform. Secure drop-in replacement for mathieudutour/github-tag-action.

9/10

kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-go

Language-agnostic SLSA provenance generation for Github Actions

3/10

nvidia/cudaq-algorithms/.github/actions/get-cudaq-wheels

Accelerated algorithm libraries for quantum-classical computing built on CUDA-Q

5/10

Maintained action available

gradio-app/github/actions/filter-paths

github helpers for gradio repos!

0/10

catchen/eslint-suggestion-action

This GitHub Action runs ESLint and provides inline feedback to the changes in a Pull Request.

5/10

Maintained action available

sonarsource/sonar-html/.github/actions/orchestrator-cache

Static analyzer for HTML used in Sonar ecosystem

6/10

lfreleng-actions/gradle-build-action

Setup a specific JDK version and run Gradle to perform a build

8/10

yonasbsd/iggy/.github/actions/go/pre-merge

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

3/10

Maintained action available

go-semantic-release/action

:octocat: semantic-release GitHub Action

5/10

envoyproxy/toolshed/actions/envoy/ci/fill

7/10

che-incubator/setup-minikube-action

Setup minikube to install/start Eclipse Che using as most as possible available memory/cpu

5/10

peterrhodesdev/build-a-badge

GitHub Action to create dynamic and customizable README badges using shields.io/endpoint

3/10

rudderlabs/rudder-transformer/.github/actions/restart-deployment

Open-source, warehouse-first Customer Data Pipeline and Segment-alternative. Collects and routes clickstream data and builds your customer data lake on your data warehouse.

3/10

Maintained action available

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/image

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

4/10