Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

sonarsource/sonar-lits/.actions/get-build-number

Language plugins Integration Tests Support

8/10

step-security/edit-release

A GitHub Action for editing an existing release. Secure drop-in replacement for irongut/EditRelease.

10/10

Maintained by StepSecurity

templum/govulncheck-action

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

2/10

envoyproxy/toolshed/actions/github/script/run

6/10

aerospike/shared-workflows/.github/actions/create-release-bundle

automation workflows

8/10

int128/hide-comment-action

Action to hide (minimize) comments in pull request

6/10

dolthub/pull-request-comment-trigger

A github action for detecting a "trigger" in a pull request description or comment

0/10

flipperdevices/flipperzero-ufbt-action

Official ufbt Action wrapper for building Flipper Zero applications

5/10

gwatts/go-coverage-action

GitHub action for Go test coverage reports

2/10

caffeelake/neqo/.github/actions/pr-comment-data-export

6/10

dustin4444/noir/.github/actions/setup

Noir is a domain specific language for zero knowledge proofs

5/10

Maintained action available

kong/kongctl/actions/setup

Developer CLI for Kong

7/10

step-security/setup-buildx-action/_next/static/chunks/88447-8031e8e6802c7131.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

hummingbird-regtech/check-pr-format-action

Checks the PR description body against a configured pattern before allowing merge.

1/10

stainless-api/upload-openapi-spec-action/merge

A GitHub action to build Stainless SDKs.

2/10

Maintained action available

nvidia/cccl/.github/actions/workflow-run-job-windows

CUDA Core Compute Libraries

7/10

likec4/actions

A Github Action for various operations and automation over LikeC4 projects

2/10

caffeelake/bun/bun/.github/actions/setup-bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

4/10

Maintained action available

step-security/setup-gcloud/__builder_checkout_dir__/.github/actions/image

A GitHub Action for installing and configuring the gcloud CLI. Secure drop-in replacement for google-github-actions/setup-gcloud.

9/10

sonarsource/sonarqube-github-c-cpp

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

6/10