Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/dynamodb-actions

Integrate Github Action with Amazon DynamoDB. Secure drop-in replacement for mooyoul/dynamodb-actions.

9/10

Maintained by StepSecurity

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/wp-content/uploads/2017/10/the-theatre-orchard.png

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

super-linter/super-linter/slim

Combination of multiple linters to run as a GitHub Action or standalone

10/10

vvakame/github-actions/welcome-comment

2/10

NVIDIA-NeMo/FW-CI-templates/send-slack-alert/.github/actions/send-slack-alert

CI/CD templates for NeMo-FW libraries

5/10

Maintained action available

JoftheV/workers-sdk/.github/actions/install-dependencies

⛅️ Home to Wrangler, the CLI for Cloudflare Workers®

3/10

step-security/ghaction-import-gpg/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub Action to import a GPG key. Secure drop-in replacement for crazy-max/ghaction-import-gpg.

10/10

aerospike/aerospike-client-java/.github/actions/publish-to-jfrog

Aerospike Java Client Library

4/10

Maintained action available

golangci/golangci-lint-action

Official GitHub Action for golangci-lint from its authors

9/10

yonasBSD/surrealdb/.github/actions/publish-crate

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10

Maintained action available

op5dev/prompt-ai

AI inference request GitHub Models via this GitHub Action.

6/10

advanced-security/sarif-toolkit/relativepaths

All things SARIF, as an Action

7/10

elastic/elastic-otel-python/.github/actions/env-install

8/10

yonasBSD/wazuh/.github/actions/vulnerability_scanner/content_generation

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

spotdemo4/bumper

git semantic version conventional commit bumper

6/10

endocrimes/setup-nomad

A GitHub Action to install HashiCorp's Nomad.

2/10

isaac-sim/IsaacLab/.github/actions/run-tests

Unified framework for robot learning built on NVIDIA Isaac Sim

5/10

Maintained action available

fathym/github-tag-action

A Github Action to tag a repo on merge.

3/10

JoshStern/push-md-to-notion

Push Markdown to Notion

2/10

Maintained action available

grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

4/10

Maintained action available