Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

entle/action-pagerduty-alert

2/10

ministryofjustice/laa-manage-your-civil-cases/.github/actions/set_up_app

A service to centrally manage civil legal aid cases for the Legal Aid Agency

6/10

step-security/gh-action-pypi-publish

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish. Secure drop-in replacement for pypa/gh-action-pypi-publish.

10/10

Maintained by StepSecurity

yonasbsd/affine/.github/actions/setup-version

There can be more than Notion and Miro. AFFiNE is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

4/10

Maintained action available

argoproj/argo-rollouts/__builder_checkout_dir__/.github/actions/secure-download-artifact

Progressive Delivery for Kubernetes

6/10

step-security/trigger-workflow-and-wait/__builder_checkout_dir__/.github/actions/fill

Trigger a workflow in another (or same) repository and wait for the job to finish. Secure drop-in replacement for convictional/trigger-workflow-and-wait.

10/10

asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-full-logo.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10

tobked/github-forks-sync-action

GitHub Action to synchronise forks

3/10

dustin4444/desktop/.github/actions/setup-ci-environment

Focus on what matters instead of fighting with Git.

5/10

Maintained action available

step-security/codeowners-validator/__builder_checkout_dir__/.github/actions/privacy-check

The GitHub CODEOWNERS file validator. Secure drop-in replacement for mszostok/codeowners-validator.

8/10

sonarsource/sonarjs/.github/actions/ruling_bot

SonarSource Static Analyzer for JavaScript and TypeScript

4/10

Maintained action available

step-security/github-action-required-labels/__builder_checkout_dir__/.github/actions/privacy-check

Fail the build if/unless a certain combination of labels are applied to a pull request. Secure drop-in replacement for mheap/github-action-required-labels.

10/10