Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

wei/git-sync

🔃 A GitHub Action for syncing between two independent repositories using force push

3/10

firedancer-io/firedancer/.github/actions/cpusonline

Firedancer is Jump Crypto's Solana validator software.

6/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

step-security/pull-request-comment-trigger/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

A github action for detecting a "trigger" in a pull request description or comment. Secure drop-in replacement for Khan/pull-request-comment-trigger.

10/10

yonasBSD/rspack/.github/actions/pnpm/install-binding-dependencies

A fast Rust-based web bundler.

5/10

Maintained action available

algesten/snowflake

2/10

peternied/check-pull-request-description-checklist

GitHub action ensuring that pull requests have a description

4/10

pytorch/tensordict/test-infra/.github/actions/setup-miniconda

TensorDict is a pytorch dedicated tensor container.

4/10

Maintained action available

grafana/plugin-actions/package-manager-detect

6/10

Nullify-Platform/dast-action

GitHub Action for Nullify DAST

5/10

dariocurr/checkout-called

checkout the called repository at the same ref it was called

7/10

google-github-actions/setup-gcloud

A GitHub Action for installing and configuring the gcloud CLI.

7/10

ministryofjustice/laa-manage-your-civil-cases/.github/actions/reusable-playwright-steps

A service to centrally manage civil legal aid cases for the Legal Aid Agency

7/10

jscrambler/code-integrity-actions/protect

Code Integrity Github Actions

2/10

nackerman-nydig/hadolint-action

GitHub action for Hadolint, A Dockerfile linting tool

3/10

coveooss/snapshots-github-actions/.github/actions/deploy

An example of how-to manage your Coveo Organization with Code, GHA, and the Coveo CLI

3/10

pytorch/test-infra/test-infra/.github/actions/setup-ssh

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

chetan/invalidate-cloudfront-action

Invalidate AWS CloudFront distribution paths

6/10

apache/skywalking-eyes/header

A full-featured license tool to check and fix license headers and resolve dependencies' licenses.

7/10

axiomhq/annotation-action

This action allows you to create an annotation in Axiom.

3/10