Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

contrast-security-oss/cibuildwheel

🎡 Build Python wheels for all the platforms with minimal configuration.

4/10

synchronal/hex-publish-action

Publish an existing package to hex.pm when the version changes.

2/10

step-integration-tests/auto-pdpr-test-92980-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/dsanders11-project-actions/image

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10

nvidia/jax-toolbox/.github/actions/fill

JAX-Toolbox

6/10

neondatabase/neondb-cli/.github/actions/prepare

Monorepo for Neon's open-source SDKs, libraries, CLIs, and framework plugins

5/10

Maintained action available

caffeelake/llvm-project/workflows/.github/workflows/release-binaries-setup-stage

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

3/10

Maintained action available

philips-labs/list-folder-action

Get a list of folders in a directory and return them as a json list

4/10

ministryofjustice/laa-submit-a-bulk-claim/.github/actions/deploy_branch

Web application for bulk upload of claims data

7/10

grafana/shared-workflows/_shared-workflows-dockerhub-login/actions/get-vault-secrets

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

v1vhm/github-repo-provisioning/.github/actions/get-gh-app-token

2/10

dawidd6/action-send-mail/_next/static/chunks/37049-fb8098a7811b0c13.js

:gear: GitHub Action for sending emails

5/10

Maintained action available

anchore/workflows/.github/actions/binny

reusable workflows to be used for the oss projects

7/10

tomasreyes/node/.github/actions/undici-wpt-current

Node.js JavaScript runtime ✨🐢🚀✨

4/10

Maintained action available

pytorch/test-infra/test-infra/.github/actions/chown-directory

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

step-integration-tests/auto-pdpr-test-38516-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

kong/slsa-generator/__builder_checkout_dir__/.github/actions/create-container_based-predicate

Language-agnostic SLSA provenance generation for Github Actions

3/10

nowsecure/nowsecure-action/fill

The NowSecure Action delivers fast, accurate, automated security analysis of iOS and Android apps coded in any language

3/10

sonarsource/sonar-java-jdt/.actions/image

Packaging of Eclipse's Java Development Tools for SonarJava

7/10

rapidsai/node/.github/actions/setup-sccache

GPU-accelerated data science and visualization in node

3/10