Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
kong/changed-files/dir1
fork of changed files git action at a known good commit
marko-k0/ic/.github/actions/bazel
Internet Computer blockchain source: the client/replica software run by nodes
surrealdb/rocksdb/.github/actions/install-maven
A library that provides an embeddable, persistent key-value store for fast storage.
canonical/setup-lxd
A GitHub Action to install & configure LXD on a runner.
freshaengineering/merge-gatekeeper
[DevEx] PR merge control - Branch protection enhancement, merge requirements validation, status check aggregation. | TypeScript, GitHub Actions
rapidsai/pre-commit-hooks/.github/actions/earliest-python-version
step-security/devcontainers-ci
A GitHub Action and Azure DevOps Task designed to simplify using Dev Containers (https://containers.dev) in CI/CD systems. Secure drop-in replacement for devcontainers/ci.
jenkins-infra/jenkins-maven-cd-action
step-security/paths-filter/__builder_checkout_dir__/.github/actions/privacy-check
Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter.
chad-golden/setup-wpr/stop
A GitHub Action that simplifies recording Windows performance traces using Windows Performance Recorder
nvidia/kai-scheduler/.github/actions/setup-e2e-cluster
KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale
step-security/gha-jobid-action/.github/actions/gha-jobid-action
โ๏ธ GitHub Action to get the current workflow run's Job URL and ID. Secure drop-in replacement for Tiryoh/gha-jobid-action.
tlylt/install-graphviz
Install Graphviz in your GitHub Actions workflow cross-platform
step-security/protobuf-ci/public-layout.tsx
A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.
yonasbsd/navidrome/.github/actions/prepare-docker
๐งโ๏ธ Modern Music Server and Streamer compatible with Subsonic/Airsonic
oxsecurity/megalinter/flavors/documentation
๐ฆ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
tj-actions/git-cliff
:octocat: Github action to run git-cliff with a custom cliff.toml
step-security/terraform-min-max/__builder_checkout_dir__/.github/actions/privacy-check
GitHub action used to evaluate the Terraform minimum and maximum versions permitted. Secure drop-in replacement for clowdhaus/terraform-min-max.
celo-org/optimism/.github/actions/docker-build-prep
Optimism is Ethereum, scaled.
chainguard-dev/actions/melange-build
A collection of reusable Github Actions workflows.