Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

upwindsecurity/create-image-build-event-action

GitHub Action for creating an image build event in Upwind.

4/10

wuan/test-action

2/10

google-github-actions/create-cloud-deploy-release

A GitHub Action for creating releases via Cloud Deploy.

4/10

babarot/action-github-comment

GitHub Actions to post a text to GitHub issue / pull request

0/10

ministryofjustice/analytical-platform-github-actions/fill

Analytical Platform GitHub Actions • This repository is defined and managed in Terraform

8/10

reality2byte/action/fill

7/10

openzeppelin/openzeppelin-relayer/.github/actions/prepare

OpenZeppelin Relayer

5/10

Maintained action available

devantler-tech/actions/dependency-review

Actions designed to streamline CI/CD processes.

4/10

Maintained action available

step-security/setup-testkube/__builder_checkout_dir__/.github/actions/image

GitHub Action to set up the Testkube CLI. Secure drop-in replacement for kubeshop/setup-testkube.

10/10

aerospike/aerospike-client-java/.github/actions/get-version

Aerospike Java Client Library

5/10

shopware/github-actions/cs-fixer

Reuseable GitHub Actions Workflows

4/10

Maintained action available

projectdiscovery/actions/setup/python

ProjectDiscovery's Composite Actions

5/10

Maintained action available

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2017/07

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

openzeppelin/openzeppelin-monitor/.github/actions/prepare

A blockchain monitoring service that watches for specific on-chain activities and triggers notifications based on configurable conditions.

5/10

pytorch/hub/test-infra/.github/actions/calculate-docker-image

Submission to https://pytorch.org/hub/

2/10

launchdarkly/js-sdk-common/.github/actions/publish-npm

Code shared between all LaunchDarkly client-side JS-based SDKs

4/10

arm-software/cmsis-actions/fill

Custom GitHub actions for MDK / AVH-FVP CI workflows

5/10

yonasbsd/bitwarden-mobile/.github/actions/log-inputs

The mobile app vault (iOS and Android).

5/10

Maintained action available

step-security/dotenv

GitHub Action to read .env file and add variables to GITHUB_ENV. Secure drop-in replacement for xom9ikk/dotenv.

10/10

Maintained by StepSecurity

ministryofjustice/money-to-prisoners-bank-admin/.github/actions/clean-ecr

Bank Admin – SSCL staff facing site for Prisoner Money suite of apps

8/10