Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-56791-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

anysphere/docker-cache

Cache Docker Images Whether Built or Pulled

2/10

roadiehq/backstage-entity-validator

Validate properties and well known annotations in your Backstage catalog-info.yaml files.

3/10

fortify/github-action/internal/run-script/js

Fortify GitHub Actions

1/10

Maintained action available

mevisoft/formbricks/.github/actions/public-layout.tsx

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-17776-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

authzed/action-spicedb-validate

GitHub Action for validating your SpiceDB schema

4/10

actions-security-demo/script-injection/actions/fill

2/10

step-security/changed-files/__builder_checkout_dir__/.github/actions/privacy-check

Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories. Secure drop-in replacement for tj-actions/changed-files.

10/10

scottbrenner/cfn-lint-action

GitHub Action for interacting with CloudFormation Linter

8/10

yonasbsd/linkerd2/.github/actions/cli-setup

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

5/10

Maintained action available

nvidia-nemo/automodel/.github/actions/build-container

🚀 Pytorch Distributed native training library for LLMs/VLMs with OOTB Hugging Face support

8/10

step-security/studio-flow-actions/null

Secure drop-in replacement for zingdevlimited/studio-flow-actions.

10/10

at-wat/go-sum-fix-action

GitHub Action to update go.sum. (Mainly for working with Renovate Bot which sometimes lacks package sum.)

4/10

insightsengineering/pip-action

Github Action to install Python PIP packages 🐍 📦

4/10

step-security/action-gh-release/__builder_checkout_dir__/.github/actions/compute-sha256

GitHub Action for creating GitHub Releases. Secure drop-in replacement for softprops/action-gh-release.

10/10

turbocoder13/py-lintro/.github/actions/pages-deploy

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

7/10

vendic/magento2-oh-dear-elasticsuite/.github/actions/image

Add Elasticsuite checks to Vendic/magento2-oh-dear

2/10

launchdarkly/lua-server-sdk/.github/actions/public-layout.tsx

LaunchDarkly Server-Side SDK for Lua

5/10

caphyon/advinst-github-action

GitHub action for Advanced Installer tool

3/10