Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/sonarqube-scan-action/public-layout.tsx
Secure drop-in replacement for sonarsource/sonarqube-scan-action.
sonarsource/sonarqube-ide-visualstudio-roslyn/.actions/get-build-number
Plugin using the Plugin API to allow Roslyn integration between SonarQube for Visual Studio and SLCore..
grafana/community-contributions/.github/actions/setup-enterprise
External contributor PR workflow testing sandbox
step-security/needs-attention
A GitHub Action for managing issues that require attention. Secure drop-in replacement for hramos/needs-attention.
daniel-graham/mcp-compressor/.github/actions/setup-python-env
An MCP server wrapper for reducing tokens consumed by MCP tools.
sonarsource/gh-action_setup-cloudflare-warp/.github/actions/fill
Setup Cloudflare WARP with device posture check and inspection certificate for secure network access.
actions-ecosystem/action-release-label
🏷️ GitHub Action to output a semver update level from a pull request release label
nvidia/numba-cuda/.github/actions/sccache-summary
The CUDA target for Numba
jahid11978/clawsweeper/clawsweeper/.github/actions/setup-action-ledger
ClawSweeper scans all issues and PRs and suggest what we can close, and why. It runs every PR / Issue once a week.
passy/extract-version-commit
launchdarkly/dotnet-cache/.github/actions/image
Portable caching library for .NET
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/get-env-details
A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)
step-security/setup-qemu-action/_next/static/chunks/82372-3e0f97fa2fb178cc.js
GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.
rudderlabs/terraform-provider-rudderstack/.github/actions/%5c%5c%5c%22https%3a/rudderstack.com%5c%5c%5c%22%5cu003e%5cu003cimg
dustin4444/electron/src/electron/.github/actions/fix-sync
:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS
approved-3rd-party-actions/r-lib-actions/setup-tinytex
GitHub Actions for the R community
step-security/proof-html/__builder_checkout_dir__/.github/actions/privacy-check
A GitHub Action to validate HTML, check links, and more ✅. Secure drop-in replacement for anishathalye/proof-html.
dustin4444/definitelytyped/.github/actions/setup-for-scripts
The repository for high quality TypeScript type definitions.
step-security/gha-setup-vsdevenv
GitHub Action to setup the VS dev environment for the job. Secure drop-in replacement for compnerd/gha-setup-vsdevenv.
pbrisbin/setup-tool-action
Generic action for installation of any tool that offers pre-compiled binaries for download