Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

actions/download-artifact

8/10

rapidsai/shared-actions/dockerhub-script

6/10

ministryofjustice/hmpps-assess-risks-and-needs-github-actions/.github/actions/cypress/merge_timings

Reusable Github workflows and actions across the ARNS space (bootstrapped 2025-02-24)

4/10

mikaelvesavuori/standardlint-action

This Action makes it even easier to use StandardLint in your GitHub CI runs.

3/10

manticoresoftware/paths-filter

Conditionally run actions based on files modified by PR, feature branch or pushed commits

2/10

step-security/actions-hugo

GitHub Actions for Hugo ⚡️ Setup Hugo quickly and build your site fast. Hugo extended, Hugo Modules, Linux (Ubuntu), macOS, and Windows are supported. Secure drop-in replacement for peaceiris/actions-hugo.

10/10

Maintained by StepSecurity

step-security/setup-ko/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Secure drop-in replacement for ko-build/setup-ko.

10/10

pilosus/action-pip-license-checker

GitHub Action for license compliance: Python, JavaScript, iOS, Android and more.

5/10

flexion/check-contributor-allowlist-action

2/10

OZI-Project/publish

OZI action - publish releases to PyPI; and mirror releases, signature bundles, and provenance in a tagged release

6/10

corentinmusard/otel-cicd-action

Open Telemetry CI/CD Action

2/10

bsord/helm-push

Push local chart to hosted chart museum repository

3/10

elastic/oblt-actions/slack/send

7/10

depot/build-push-action

GitHub Action to build and push Docker images with Depot

4/10

OSS-Docs-Tools/code-owner-self-merge

A GitHub Action for letting CODEOWNERS merge PRs via green PR reviews

3/10

lfit/releng-reusable-workflows/.github/actions/git-commit-message-action

Reusuable workflows developed by LF Release Engineering

7/10

open-telemetry/opentelemetry-ruby-contrib/.github/actions/test_gem

Contrib Packages for the OpenTelemetry Ruby API and SDK implementation.

7/10

step-security/action-send-mail/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.

10/10

facebook/dotslash-publish-release

Create DotSlash files for GitHub releases

5/10

Homebrew/actions/bump-formulae

🚀 Homebrew's GitHub Actions

7/10