Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/test-reporting/__builder_checkout_dir__/.github/actions/privacy-check

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for phoenix-actions/test-reporting.

8/10

jbajic/buildifier

GitHub action for running Bazel's format tool buildifier.

4/10

burnett01/rsync-deployments

GitHub Action for deploying code via rsync over ssh securely - used by 5k+ workflows!

8/10

step-security/slackify-markdown-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to convert markdown into Slack's mrkdwn. Secure drop-in replacement for LoveToKnow/slackify-markdown-action.

10/10

step-security/proof-html

A GitHub Action to validate HTML, check links, and more ✅. Secure drop-in replacement for anishathalye/proof-html.

10/10

Maintained by StepSecurity

step-security/gh-actions-lua

GitHub action for Lua/LuaJIT. Secure drop-in replacement for leafo/gh-actions-lua.

10/10

Maintained by StepSecurity

rapidsai/velox-testing/.github/actions/test-benchmark-data-tools

6/10

oxidize-rb/actions/post-run

4/10

Maintained action available

step-security/quarto-actions/public-layout.tsx

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10

reviewdog/reviewdog

🐶 Automated code review tool integrated with any code analysis tools regardless of programming language

6/10

nvidia/cuequivariance/.github/actions/setup-cuequivariance-jax

cuEquivariance is a math library that is a collective of low-level primitives and tensor ops to accelerate widely-used models, like DiffDock, MACE, Allegro and NEQUIP, based on equivariant neural networks. Also includes kernels for accelerated structure prediction.

3/10

Maintained action available

pytorch/torchtitan/test-infra/.github/actions/teardown-linux

A PyTorch native platform for training generative AI models

4/10

Maintained action available

googleapis/release-please

generate release PRs based on the conventionalcommits.org spec

8/10

caffeelake/cilium/.github/actions/kind-external-network

eBPF-based Networking, Security, and Observability

3/10

github/codeql-action/start-proxy

Actions for running CodeQL analysis

7/10

extractions/setup-crate

📦 GitHub Action to install a Rust crate from a GitHub release

2/10

ai-dynamo/dynamo/.github/actions/skopeo-login

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

step-security/repo-sync-pull-request

⤵️ A GitHub Action for creating pull requests. Secure drop-in replacement for repo-sync/pull-request.

10/10

Maintained by StepSecurity

step-security/docs-as-code-confluence

Publish the content of a folder to confluence Github Action. Secure drop-in replacement for Bhacaz/docs-as-code-confluence.

10/10

Maintained by StepSecurity

microsoft/powerplatform-actions/branch-solution

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

5/10