Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
nowsecure/nowsecure-action/image
The NowSecure Action delivers fast, accurate, automated security analysis of iOS and Android apps coded in any language
skaut/wordpress-version-checker
A GitHub action to automatically create issues when a plugin "tested up to" version doesn't match the latest WordPress version.
microsoft/onnxruntime-github-actions/build-docker-image
Reusable GitHub Actions for ONNX Runtime repos. The actions are used for constructing ONNX Runtime's public pull request pipelines.
verygoodopensource/very_good_coverage
GitHub Action which helps enforce code coverage threshold using lcov created by Very Good Ventures ๐ฆ
loonghao/vx
Universal Development Tool Manager
ministryofjustice/devsecops-actions/cruft
A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.
brianpugh/install-micropython
Github Action to install micropython.
yagihash/flutter-fvm-config-action/config
An action that parses an https://github.com/leoafarias/fvm config file into environment variables which can then be used to configure the https://github.com/subosito/flutter-action.
runs-on/cache/restore
Shockingly faster GitHub Action cache with S3 backend
homebrew/actions/bump-formulae
๐ Homebrew's GitHub Actions
launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/public-layout.tsx
Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis
accenture/autofixture.xunit2.automock/.github/actions/materialize-signing-key
Autofixture auto-mocking for XUnit2 using a mocking library of your choice.
sredevopsorg/nhost/.github/actions/image
The Open Source Firebase Alternative with GraphQL.
ministryofjustice/laa-submit-a-bulk-claim/.github/actions/get_release_name
Web application for bulk upload of claims data
kong/slsa-github-generator/.github/actions/image
Language-agnostic SLSA provenance generation for Github Actions
tempoxyz/gh-actions/vendor/depot/setup-action
Reusable GitHub Actions for Tempo
harekrishnarai/flowlyt
Flowlyt is a security analyzer that scans GitHub Actions workflows to detect malicious patterns, misconfigurations, and secrets exposure, helping enforce secure CI/CD practices.
step-security/publish-to-bcr
GitHub release automation for publishing modules to the Bazel Central Registry. Secure drop-in replacement for bazel-contrib/publish-to-bcr.
thatisuday/go-cross-build
GitHub Action to build Go (Golang) modules.
step-integration-tests/auto-pdpr-test-93275-10/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing