Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

bazelbuild/continuous-integration/actions/fill

Bazel's Continuous Integration Setup

6/10

action-pack/set-variable

Action to set a repository variable.

3/10

Maintained action available

tsukimarf/download-artifact

3/10

openzeppelin/openzeppelin-relayer-sdk/.github/actions/prepare

OpenZeppelin Relayer SDK

3/10

idanho/comment-on-pr

A GitHub Action to comment on the relevant open PR when a commit is pushed.

3/10

signpath/github-action-submit-signing-request

4/10

Maintained action available

connor-baer/action-sync-branch

GitHub Action to keep a branch in sync with the current branch

7/10

ministryofjustice/laa-civil-manage/.github/actions/deploy

Frontend service to allow legal providers to manage their applications for civil legal aid.

7/10

hashgraph/stablecoin-studio/.github/actions/create-env-file

All-in-one stablecoin configuration, issuance, and management

3/10

maxdesiatov/swift-windows-action

GitHub Action for building and testing your code with Swift on Windows

3/10

lcarva/review-rot-action/web

GitHub actions for review-rot

3/10

coursgranja91-hash/erk/.github/actions/setup-claude-code

erk is a tool for the orchestration and management of plan-oriented agentic engineering.

3/10

run-ai/gajira-find-issue-key

1/10

Maintained action available

step-security/docker-build-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10

jfagoagas/grafana/actions/metrics-collector

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10

grafana/plugin-ci-workflows/actions/plugins/docs/test

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

opea-project/validation/actions/trivy-scan

3/10

equinor/cc-components/.github/actions/get-fusion-token

Components and apps for CC.

5/10

launchdarkly/go-server-sdk-redis-go-redis/.github/actions/coverage

Redis integration for the LaunchDarkly SDK for Server-side Go (with go-redis client)

5/10

ministryofjustice/laa-data-claims-reporting-service/.github/deploy_branch

Java service to generate claims reports

8/10