Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

peter-murray/semver-data-action

GitHub Action that can validate and parse data from SemVer version numbers

3/10

step-security/slsa-github-generator/.github/actions/rng

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10

Maintained by StepSecurity

chainguard-actions/googleapis-release-please-action

2/10

step-integration-tests/auto-pdpr-test-06314-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-10987-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

ministryofjustice/laa-claim-for-payment-frontend/.github/actions/trigger_workflow

Frontend application for the LAA Claim for Payment service

6/10

jaid/action-npm-install

GitHub Action for installing dependencies from package.json after checkout.

3/10

adtac/cherry-pick-bot

Automatically cherry-pick commits from PRs and merge them

3/10

maxxgx/physical-ai-studio/.github/actions/docker-build

Physical AI Studio is an end-to-end framework for teaching robots to perform tasks through imitation learning from human demonstrations.

6/10

crazy-max/ghaction-github-pages

GitHub Action to deploy to GitHub Pages

5/10

Maintained action available

step-security/ad-m-github-push-action/__builder_checkout_dir__/.github/actions/image

GitHub actions to push back to repository eg. updated code. Secure drop-in replacement for ad-m/github-push-action.

10/10

openziti/ziti-ci

Shared infrastrure code for Ziti Golang projects

4/10

step-security/set-github-variable/__builder_checkout_dir__/.github/actions/privacy-check

Use this Github Action to update a variable in your Github Action Workflows for your repository. Secure drop-in replacement for mmoyaferrer/set-github-variable.

8/10

posthog/duckdb/.github/actions/setup-msvc-env

DuckDB is an analytical in-process SQL database management system

6/10

consensys/github-actions/mm-security-scanner

Github Actions for Consensys projects

3/10

step-security/setup-bazelisk/__builder_checkout_dir__/.github/actions/privacy-check

Set up your GitHub Actions workflow with a specific version of Bazelisk. Secure drop-in replacement for bazelbuild/setup-bazelisk.

8/10

enriconunes/claude-autofix-action

3/10

wevm/viem

TypeScript Interface for Ethereum

5/10

Maintained action available

cilium/reusable-workflows/.github/actions/push-helm-chart

3/10

step-security/go-testreport

Generate a markdown test report from the go json test result. Secure drop-in replacement for becheran/go-testreport.

10/10

Maintained by StepSecurity