Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

elastic/apm-agent-dotnet/.github/workflows/bootstrap

8/10

edera-dev/cross/.github/actions/setup-rust

“Zero setup” cross compilation and “cross testing” of Rust crates

3/10

JoftheV/pytorch/.github/actions/setup-xpu

Tensors and Dynamic neural networks in Python with strong GPU acceleration

3/10

ionos-deploy-now/artifact-action

1/10

neondatabase/neon/.github/actions/download

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

3/10

Maintained action available

approved-3rd-party-actions/mage-action

GitHub Action for Mage

2/10

grafana/promql-builder/.github/actions/setup-cog

Set of libraries for writing and composing PromQL queries as-code in several languages.

5/10

elastic/cloudbeat/.github/actions/init-integration

Analyzing Cloud Security Posture

6/10

aquasecurity/tfsec-sarif-action

5/10

leafo/gh-actions-lua

GitHub action for Lua/LuaJIT

4/10

step-security/depot-setup-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

▶️ GitHub Action to download and install the Depot CLI. Secure drop-in replacement for depot/setup-action.

10/10

pytorch/TensorRT/.github/actions/assigner

PyTorch/TorchScript/FX compiler for NVIDIA GPUs using TensorRT

3/10

Maintained action available

r-lib/actions/setup-r

GitHub Actions for the R community

9/10

tecolicom/actions-install-and-archive

2/10

actions-rs/grcov

📈 GitHub Action for code coverage reporting with grcov

3/10

reactivecircus/android-emulator-runner

A GitHub Action for installing, configuring and running hardware-accelerated Android Emulators on macOS virtual machines.

5/10

upptime/uptime-monitor

⬆️📈 Uptime monitor powered by GitHub Actions

5/10

pytorch/pytorch/test-infra/.github/actions/chown-directory

Tensors and Dynamic neural networks in Python with strong GPU acceleration

6/10

step-security/github-actions-slack

Github Action for sending message (and reactions/threads/update/blocks) to Slack - With support for Slack's optional arguments. Secure drop-in replacement for archive/github-actions-slack.

10/10

Maintained by StepSecurity

jupyterlab/maintainer-tools/.github/actions/downstream-test

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

7/10