Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts
Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)
nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment
NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking
hoprnet/hopr-workflows/actions/release-version
GitHub workflows helping HOPR automate tasks via actions
jahid11978/clawsweeper/clawsweeper/.github/actions/setup-codex
ClawSweeper scans all issues and PRs and suggest what we can close, and why. It runs every PR / Issue once a week.
juliangruber/sleep-action
Sleep for a set period of time
dmptrluke/django-fetch-metadata/.github/.tmp/.generated-actions/image
Resource isolation policy for Django using Fetch Metadata request headers
step-security/python-coverage-comment-action
Publish coverage report as PR comment, and create a coverage badge & dashboard to display on the Readme for Python projects, all inside GitHub without third party servers. Secure drop-in replacement for py-cov-action/python-coverage-comment-action.
step-integration-tests/auto-pdpr-test-33716-12/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
yonasbsd/buck2/.github/actions/init_opam
Build system, successor to Buck
openzeppelin/openzeppelin-upgrades/.github/actions/setup
Plugins for Hardhat and Foundry to deploy and manage upgradeable contracts on Ethereum.
royaloughtness/secureblue-dev/.github/workflows/shared-runner-setup
Hardened Fedora Atomic and Fedora CoreOS images
nvidia/model-optimizer/.github/actions/public-layout.tsx
A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.
dawidd6/action-ansible-playbook
:gear: GitHub Action for running Ansible playbooks
solana-developers/github-actions/extract-versions
A collection of github actions to build, idl upload and verify programs. With Squads support
approved-3rd-party-actions/upload-mobile-app-github-action
The Github action to upload an mobile app file to Kobiton Apps Repo
sonarsource/sonar-update-center/gh-action_release/main
actions/setup-java/v4.7.1
Set up your GitHub Actions workflow with a specific version of Java
officedev/teamsfx-cli-action
teasmfx CI/CD action
step-security/gh-setup/__builder_checkout_dir__/.github/actions/privacy-check
:octocat: Setup asset of Github releases. Secure drop-in replacement for k1LoW/gh-setup.
aquasecurity/tfsec-pr-commenter-action
Add comments to pull requests where tfsec checks have failed