Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
homebrew/actions/bump-formulae
๐ Homebrew's GitHub Actions
launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/public-layout.tsx
Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis
accenture/autofixture.xunit2.automock/.github/actions/materialize-signing-key
Autofixture auto-mocking for XUnit2 using a mocking library of your choice.
sredevopsorg/nhost/.github/actions/image
The Open Source Firebase Alternative with GraphQL.
ministryofjustice/laa-submit-a-bulk-claim/.github/actions/get_release_name
Web application for bulk upload of claims data
kong/slsa-github-generator/.github/actions/image
Language-agnostic SLSA provenance generation for Github Actions
harekrishnarai/flowlyt
Flowlyt is a security analyzer that scans GitHub Actions workflows to detect malicious patterns, misconfigurations, and secrets exposure, helping enforce secure CI/CD practices.
step-security/publish-to-bcr
GitHub release automation for publishing modules to the Bazel Central Registry. Secure drop-in replacement for bazel-contrib/publish-to-bcr.
thatisuday/go-cross-build
GitHub Action to build Go (Golang) modules.
celo-org/social-connect/.github/actions/sync-workspace
Protocol mapping social identifiers to blockchain addresses
ansible-community/ansible-test-gh-action
A composite GitHub Action encapsulating the GitHub Actions CI/CD workflows setup necessary for testing Ansible collection repositories on GitHub
agenthunt/conventional-commit-checker-action
nvidia/nemo/send-slack-alert/.github/actions/send-slack-alert
A scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)
grafana/grafana-aws-sdk/actions/commands
Common AWS configs for plugins
sonatype/actions/fetch-sbom
Public repository to keep Sonatype's GitHub Actions.
hashicorp/actions-packaging-linux
Public GitHub Actions
paladini/harness-score/public-layout.tsx
Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.
codium-ai/pr-agent
๐ PR Agent: The Original Open-Source PR Reviewer. This project It is not the Qodo free tier.
vampire/setup-wsl
A GitHub action to install and setup a Linux distribution for the Windows Subsystem for Linux (WSL)
immutable/ts-immutable-sdk/.github/actions/public-layout.tsx
Immutable Typescript SDK