Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
caffeelake/dify/.github/actions/public-layout.tsx
Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting you quickly go from prototype to production.
johnabell/absinthe_field_telemetry
A library for analysing absinthe GraphQL runtime usage
launchdarkly/gh-actions/actions/release-secrets
LaunchDarkly shared GitHub Actions and Workflows
sonarsource/release-github-actions/create-integration-ticket
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.
actionshub/dco
ivuorinen/actions/codeql-analysis
a collection of reusable GitHub Actions designed to streamline CI/CD processes and ensure code quality
coveo/stew
Complete Python CI/CD solution built around Poetry.
grafana/mimir-loki/lib/actions/public-layout.tsx
Like Prometheus, but for logs.
abcxyz/pkg/.github/actions/fill
Common tools and libraries for abcxyz projects.
linode/karpenter-provider-linode/.github/actions/e2e
Linode Karpenter provider
appetizeio/github-action-appetize
Github Action to facilitate interaction with the Appetize.io API
posthog/posthog/.github/actions/paths-filter
:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools โ AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more โ capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.
step-security/harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
bitwarden/gh-actions/version-bump
Bitwarden-utilized GitHub Actions.
ultralytics/actions/setup-uv
Ultralytics GitHub Actions for formatting, PR reviews, labeling, CI retries, CLA checks, and dependency updates.
ambilykk/copilot-metrics-retention
The Copilot Metrics API supplies data spanning a 28-day timeframe. This Action is designed to persistently store this data over time in a JSON file format.
step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.
step-security/action-size/__builder_checkout_dir__/.github/actions/privacy-check
๐ GitHub Action to determine a label to be added based on PR's size. Secure drop-in replacement for actions-ecosystem/action-size.
tempoxyz/gh-actions/actions/setup-terraform
Reusable GitHub Actions for Tempo
anchore/binny/.github/actions/bootstrap
Manage a directory of binaries without a package manager