Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

aerospike/aerospike-client-python/.github/actions/wait-for-ce-server-to-start

aerospike/aerospike-client-python/.github/actions/wait-for-ce-server-to-start

Aerospike Python Client

4/10
codecov/basic-test-results

codecov/basic-test-results

GitHub Actions to collect test results and emit a PR comment about the test status.

6/10
Reality2byte/codeql-action/init

Reality2byte/codeql-action/init

Actions for running CodeQL analysis

7/10
Git-Hub-Chris/PyTorch/.github/actions/pytest-cache-download

Git-Hub-Chris/PyTorch/.github/actions/pytest-cache-download

Python package.

4/10
fish-shop/install-plugin

fish-shop/install-plugin

A GitHub action for installing fish shell plugins.

8/10
beeb/lintspec

beeb/lintspec

A blazingly fast linter for NatSpec comments in Solidity code

5/10
mariomac/linked-release-notes

mariomac/linked-release-notes

3/10
grafana/cloudcost-exporter/.github/actions/setup-goversion

grafana/cloudcost-exporter/.github/actions/setup-goversion

Prometheus Exporter for Cloud Provider agnostic cost metrics

8/10
tbowman01/podinfo/.github/actions/kubeconform

tbowman01/podinfo/.github/actions/kubeconform

Go microservice template for Kubernetes

5/10
palmerhq/changecast

palmerhq/changecast

Create beautiful, performant, accessible changelogs from your Github releases.

2/10
chainguard-dev/actions/release-notes

chainguard-dev/actions/release-notes

A collection of reusable Github Actions workflows.

8/10
easimon/maximize-build-space

easimon/maximize-build-space

Github action to maximize the available disk space on Github runners

6/10
step-security/mongodb-github-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/mongodb-github-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Use MongoDB in GitHub Actions. Secure drop-in replacement for supercharge/mongodb-github-action.

10/10
mattallty/jest-github-action

mattallty/jest-github-action

Jest action adding checks with annotations to your pull requests and coverage table as comments

2/10
buildsville/add-remove-label

buildsville/add-remove-label

2/10
github/codeql-action/upload-sarif

github/codeql-action/upload-sarif

Actions for running CodeQL analysis

10/10
Chizkiyahu/delete-untagged-ghcr-action

Chizkiyahu/delete-untagged-ghcr-action

Action for delete containers from Github container registry

3/10
upsidr/merge-gatekeeper

upsidr/merge-gatekeeper

Get better merge control

5/10
kevinzunigacuellar/coauthor-action

kevinzunigacuellar/coauthor-action

A GitHub Action that generates a list of coauthors from a pull request and writes them to a comment

1/10
Samsung/CredSweeper

Samsung/CredSweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

7/10