Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-cleanup
A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)
yonasbsd/authentik/.github/actions/test-results
The authentication glue you need.
step-security/docker-build-push-action/_next/static/chunks/97904-01f2134615e51508.js
GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.
4cloudguru/shared-workflows/.github/actions/verify-vsix-signature
Reusable GitHub Actions workflows shared across the Terraform suite and pipeline-task families. Public so repos in both sethbacon/ and 4cloudguru/ can call them.
step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/image
๐ ๏ธ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.
steipete/run-testbox
polasudo/rhdh/.github/actions/check-image-and-changes
The repo formerly known as janus-idp/backstage-showcase
servicenow/sncicd-publish-app
aerospike/aerospike-client-nodejs/.github/actions/update-version
Node.js client for the Aerospike database
pr-annotators/mypy-pr-annotator
Annotate pull requests with mypy errors detected during CI
step-integration-tests/auto-pdpr-test-87628-14/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
vendic/github-actions-setup-opensearch
An action for OpenSearch
goreleaser/goreleaser-action
GitHub Action for GoReleaser
vexxhost/docker-atmosphere/.github/actions/public-layout.tsx
Reusable GitHub Actions for building Atmosphere Docker images
threeal/cmake-action
Configure and build CMake projects on GitHub Actions
sonatype/actions
Public repository to keep Sonatype's GitHub Actions.
nvidia/nemoclaw/.trusted-hermes-resolver/.github/actions/resolve-reviewed-hermes-platform
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
akashchi/download-artifact
shovon0203/docker-action
step-security/setup-buildx-action/_next/static/chunks/polyfills-42372ed130431b0a.js
GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.