Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/gha-repo-manager/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Manage your Github repo(s) settings and secrets using Github Actions and a yaml file. Secure drop-in replacement for andrewthetechie/gha-repo-manager.

10/10

DIVD-NL/cna-bot

GitHub action to validate and submit CVE entries using cvelib, cvelint and cve service.

6/10

quotidian-ennui/actions-olio/commit-status-and-label

It's a gallimaufry of actions

6/10

step-security/prisma-cloud-scan/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud. Secure drop-in replacement for PaloAltoNetworks/prisma-cloud-scan.

10/10

microsoft/setup-kiota

Action that installs Kiota OpenAPI client generator so it can be used in your workflow

6/10

easingthemes/ssh-deploy

GitHub Action for deploying code via rsync over ssh. (with NodeJS)

4/10

grafana/community-contributions/.github/actions/check-jobs

External contributor PR workflow testing sandbox

4/10

architect/action-build

3/10

aerospike/aerospike-client-java/.github/actions/build-and-test

Aerospike Java Client Library

5/10

Maintained action available

step-security/npm-get-version-action

This Action scans for a package.json file and reads the version number from that. Secure drop-in replacement for martinbeentjes/npm-get-version-action.

10/10

Maintained by StepSecurity