Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
envoyproxy/toolshed/actions/github/checkout
yonasbsd/testcontainers-node/.github/actions/rancher-desktop-setup
Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.
mikehardy/buildcache-action
GitHub Action to install and configure buildcache for faster compilation
qodo-ai/pr-agent
๐ PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
lhotari/action-upterm
Debug your GitHub Actions via SSH by using upterm/tmux to get access to the runner system itself.
crystal-lang/install-crystal
GitHub Action: Install Crystal programming language
yonasbsd/libsignal/.github/actions/restore-cargo-cache
Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
chainguard-actions/peter-evans-create-pull-request
nimbus-agent/.github/actions/fill
Org profile & shared community-health defaults for Nimbus
step-security/actions-rs-toolchain
๐ ๏ธ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.
step-security/conventional-changelog-action/__builder_checkout_dir__/.github/actions/privacy-check
Github Action that generates a changelog with the Conventional Changelog CLI. Secure drop-in replacement for TriPSs/conventional-changelog-action.
anbiona/gale/.github/workflows/runner-setup
Hardened personal server based on secureblue.
dolthub/label-customer-issues
A GitHub Action to apply a label to issues and PRs created by authors who are not members of the team that owns a repo.
pytorch/test-infra/.github/actions/teardown-linux
This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.
datadog/integrations-core/.github/actions/setup-test-target-scripts
Core integrations of the Datadog Agent
smartcontractkit/.github/actions/ctf-check-mod-version
reusable GHA workflows and actions
caffeelake/llvm-project/workflows-main/.github/workflows/release-binaries-setup-stage
The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.
tannergolden/standards/actions/apply-settings
Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, scanning, releases, and a shared label taxonomy.
anolilab/workflows/step/setup
Shared Github Actions for Node.js projects and Monorepos.
nvidia/nodewright/.github/actions/cosign-verify-release
A Kubernetes Operator to manage Node OS customizations.