Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
pytorch/rl/test-infra/.github/actions/teardown-windows
A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.
lfreleng-actions/rtd-build-action
Action to build/publish "Read the Docs" documentation
nvidia-nemo/evaluator/fw-ci-templates/.github/actions/check-imports
Open-source library for scalable, reproducible evaluation of AI models and benchmarks.
backstage/actions/re-review
Custom actions for automating Backstage workflows
step-security/publish-unit-test-result-action/macos
GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.
skyvern-ai/repo-file-sync-action
๐ GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.
timschoenle/helm-charts/.github/actions/fill
Helm charts for the applications and utilities I run on Kubernetes, built on one shared library.
nvidia/pytorch-windows-ci/oot/.github/actions/image
Out of tree repo to run pytorch CI tests on Nvidia GPUs for Windows
sonarsource/sonar-java/.github/actions/public-layout.tsx
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
octodemo/philips-actions-workshop/.github/actions/containerized-action
elastic/elastic-otel-dotnet/.github/workflows/image
Elastic OpenTelemetry .NET Distribution
caffeelake/deepspeed/.github/workflows/setup-venv
DeepSpeed is a deep learning optimization library that makes distributed training and inference easy, efficient, and effective.
step-security/publish-unit-test-result-action/windows
GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.
step-security/actions-oidc-debugger/__builder_checkout_dir__/.github/actions/image
An Action for printing OIDC claims in GitHub Actions. Secure drop-in replacement for github/actions-oidc-debugger.
aerospike/shared-workflows/.github/actions/release-evidence
automation workflows
kong/slsa-generator/.github/actions/fill
Language-agnostic SLSA provenance generation for Github Actions
step-security/pull-request-comment-trigger/__builder_checkout_dir__/.github/actions/image
A github action for detecting a "trigger" in a pull request description or comment. Secure drop-in replacement for Khan/pull-request-comment-trigger.
philss/rustler-precompiled-action
Build lib files for the RustlerPrecompiled project.