Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

marceloprado/has-changed-path

GitHub Action that saves time and money in monorepo environments

2/10

EnricoMi/publish-unit-test-result-action/windows

GitHub Action to publish unit test results on GitHub

4/10

Maintained action available

xalvarez/prevent-file-change-action

Fail a pull request workflow if certain files are changed

5/10

Maintained action available

wtrocki/npm-publish-action-monorepo

GitHub action to automatically publish packages to npm

2/10

actions-security-demo/pytorch/.github/actions/teardown-xpu

Tensors and Dynamic neural networks in Python with strong GPU acceleration

3/10

grafana/azure-data-explorer-datasource/actions/commands

Grafana datasource plugin for Microsoft Azure Data Explorer (formerly Azure Kusto)

6/10

flexion/uswds-elements/.github/actions/setup

USWDS Elements

3/10

Maintained action available

step-security/maven-settings-xml-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Github Action to create maven settings (~/.m2/settings.xml). Secure drop-in replacement for whelk-io/maven-settings-xml-action.

10/10

step-security/repository-dispatch/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A GitHub action to create a repository dispatch event. Secure drop-in replacement for peter-evans/repository-dispatch.

10/10

ericcornelissen/tool-versions-update-action/pr

A GitHub Action to automatically update the tools in your .tool-versions file

7/10

pytorch/test-infra/test-infra/.github/actions/setup-nvidia

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

4/10

Maintained action available

Git-Hub-Chris/PyTorch/.github/actions/get-workflow-job-id

Python package.

4/10

chronograph-pe/create-pull-request

A GitHub action to create a pull request for changes to your repository in the actions workspace

2/10

pantsbuild/actions/init-pants

Useful GitHub Actions that work with the Pants build system

4/10

dominikh/staticcheck-action

Staticcheck's official GitHub Action

5/10

errata-ai/vale-action

:octocat: The official GitHub Action for Vale -- install, manage, and run Vale with ease.

3/10

flutter-actions/setup-flutter

This GitHub Action installs and setup of a Flutter SDK

5/10

kyverno/kyverno

Cloud Native Policy Management

8/10

nodejs/web-team/actions/notify-on-push

The Node.js Website Team Governance Repository

8/10

ansible-lockdown/action.playbook

:book: Mindpoint Group - A Tyto Athene Company - Github Action for running Ansible Playbooks. :book::

4/10