Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
Songmu/tagpr
automatically creates and updates a pull request for unreleased items, tag them when they are merged, and create releases.
redhat-plumbers-in-action/differential-shellcheck
🐚 GitHub Action for running ShellCheck differentially
slsa-framework/slsa-github-generator/.github/actions/secure-upload-folder
Language-agnostic SLSA provenance generation for Github Actions
equinor/procosys-js-frontend/.github/actions/pnpm-setup
Frontend javascript application for Project Completion System (ProCoSys)
modeseven-lfreleng-actions/python-test-action
Tests a Python project and generates coverage reports
canonical/get-workflow-version-action
GitHub action to get commit SHA that GitHub Actions reusable workflow was called with
tj-actions/glob
:octocat: Github action to match glob patterns with support for matching deleted files.
camunda/infra-global-github-actions/fossa/pr-check
Small Github Actions maintained by Infra team and used by other teams inside Camunda
sbt/setup-sbt
setup-sbt installs the official sbt runner
step-security/gha-repo-manager
Manage your Github repo(s) settings and secrets using Github Actions and a yaml file. Secure drop-in replacement for andrewthetechie/gha-repo-manager.
getsentry/forked-action-lock-threads
GitHub Action that locks closed issues and pull requests after a period of inactivity
bencatlab/gha-svu
hashicorp/packer-github-actions
Run HashiCorp Packer as part of your GitHub Actions Workflow
Reality2byte/checkout
Action for checking out a repo
Templum/govulncheck-action
This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.
elastic/apm-aws-lambda/.github/actions/bootstrap
A repository for the AWS Lambda extension and other lambda related tools and build scripts.
fish-shop/indent-check
A GitHub action for checking indentation in fish shell files.
esmf-org/install-esmf-action
Install ESMF libraries, modules, and binaries on GitHub Runner
NVIDIA/gitlab-answer-app/*
Simple GitHub App that notifies users of the correct way to contribute
OpenZeppelin/openzeppelin-contracts-upgradeable/.github/actions/storage-layout
Upgradeable variant of OpenZeppelin Contracts, meant for use in upgradeable contracts.