Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

ex0dus-0x/fork-sentry

GitHub Action for detecting and alerting on suspicious forks of your repository

0/10

jerome1337/gofmt-action

Ready to use gofmt GitHub action

3/10

coveooss/snapshots-github-actions/.github/actions/image

An example of how-to manage your Coveo Organization with Code, GHA, and the Coveo CLI

3/10

step-security/release-please-action/__builder_checkout_dir__/.github/actions/image

automated releases based on conventional commits. Secure drop-in replacement for googleapis/release-please-action.

10/10

step-integration-tests/auto-pdpr-test-56435-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

febiosoftware/febio-workflows/.github/actions/create-sdk

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

2/10

aws-actions/configure-aws-credentials

Configure AWS credential environment variables for use in other GitHub Actions.

10/10

tanker187/node-semver/.github/actions/create-check

The semver parser for node (the one npm uses)

5/10

step-security/create-pull-request/_next/static/chunks/98234-276d5b47fca26766.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

tannergolden/standards/actions/standards-version

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.

5/10

asyncapi/saunter/.github/image

Saunter is a code-first AsyncAPI documentation generator for dotnet.

4/10

step-integration-tests/auto-pdpr-test-86617-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sersoft-gmbh/xcodebuild-action

A GitHub action that runs xcodebuild

6/10

github/super-linter/public-layout.tsx

Combination of multiple linters to install as a GitHub Action

5/10

Maintained action available

step-security/gradle-actions/__builder_checkout_dir__/.github/actions/privacy-check

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub. Secure drop-in replacement for gradle/actions.

10/10

dustin4444/oss-directory/main/.github/workflows/image

A curated directory of open source software (OSS) projects and their associated artifacts

5/10

Maintained action available

step-security/tfclean/__builder_checkout_dir__/.github/actions/privacy-check

tfclean is tool to remove applied moved block, import block, etc. Secure drop-in replacement for takaishi/tfclean.

8/10

step-security/setup-qemu-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

9/10

jfagoagas/grafana/actions/has-matching-release-tag

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10

ministryofjustice/github-actions/clean-actions-runner

A collection of reusable GitHub Actions for the Ministry of Justice, designed to streamline and enhance workflows across our projects. • This repository is defined and managed in Terraform

6/10