Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia/cuda-python/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

CUDA Python: Performance meets Productivity

6/10

rajbos-actions/blog-post-workflow

Show your latest blog posts from any sources or StackOverflow activity or Youtube Videos on your GitHub profile/project readme automatically using the RSS feed

0/10

elastic/apm-agent-java/.github/workflows/maven-goal

8/10

anchore/sbom-action

GitHub Action for creating software bill of materials using Syft.

8/10

thiagodnf/yaml-schema-checker

A Github action for validating .yaml files using JSON schemas

2/10

ministryofjustice/hmpps-github-actions/.github/actions/trivy-scan

Github actions for HMPPS projects

6/10

edge/simple-slack-notify

Slack notification action that just works

2/10

step-security/github-actions-ansible-vault/__builder_checkout_dir__/.github/actions/privacy-check

Ansible for GitHub Actions. Secure drop-in replacement for taichunmin/github-actions-ansible-vault.

10/10

approved-3rd-party-actions/r-lib-actions/setup-pandoc

GitHub Actions for the R community

3/10

fnkr/github-action-ghr

GitHub Action to upload build artifacts to GitHub releases.

4/10

anchore/packageurl-go/.github/actions/wait-for-check

Go implementation of the package url spec

7/10

jorgebg/stateful-action

An utility for managing the state of your application on a reserved branch.

3/10

appleboy/scp-action

GitHub Action that copy files and artifacts via SSH.

5/10

step-security/fetch-gh-release-asset

Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.

10/10

Maintained by StepSecurity

ad-m/github-push-action

GitHub actions to push back to repository eg. updated code

7/10

openzeppelin/openzeppelin-adapters/../__tool_action_dir__

OpenZeppelin Ecosystem Adapters are a set of modular, chain-specific integration packages that bridge the gap between blockchain ecosystems and developer tooling.

1/10

step-security/setup-cocoapods

Set up your GitHub Actions workflow with a specific version of Cocoapods. Secure drop-in replacement for maxim-lobanov/setup-cocoapods.

10/10

Maintained by StepSecurity

caffeelake/cilium/.github/actions/cilium-config

eBPF-based Networking, Security, and Observability

3/10

akjus/stale

Marks issues and pull requests that have not had recent interaction

3/10

alexellis/upload-assets

GitHub Action to upload multiple assets to a release

3/10