Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/action-setup/__builder_checkout_dir__/.github/actions/secure-download-artifact

Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.

10/10

necojackarc/auto-request-review

A GitHub Action that automatically requests review of a pull request based on files changes and/or groups the author belongs to 🤖

3/10

coursier/cache-action

GitHub action to save / restore the coursier cache of your build

5/10

Maintained action available

prefix-dev/setup-pixi

GitHub Action to set up pixi :octocat: 📦

7/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins/tiny-carousel-horizontal-slider-plus/inc

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

breathingdust/github-team-slackbot

2/10

jake-scott/go-test-coverage

go-test-coverage is tool and github action which reports issues when test coverage is below set threshold

3/10

step-security/ssh-key-action/.github/actions/public-layout.tsx

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

10/10

eliheady/dnscontrol-action-experiment

4/10

hiero-ledger/hiero-mirror-node/.github/actions/k6

Hiero Mirror Node archives data from consensus nodes and serves it via an API

7/10

jfagoagas/terraform-provider-aws/.github/actions/community_check

Terraform AWS provider

2/10

cpcloud/compare-commits-action

Compare the differences between two commits

2/10

vegardit/gha-setup-yq

gha-setup-yq is a GitHub action to install the yq command line YAML parser.

3/10

adaptive-enforcement-lab/readability

Documentation readability analyzer - GitHub Action and CLI tool for measuring content quality metrics

7/10

contentful/create-contentful-app/.github/actions/test-functions

Bootstrap a Contentful App

6/10

launchdarkly/java-server-sdk-dynamodb/.github/actions/ci

DynamoDB integration for the LaunchDarkly SDK for Server-side Java

4/10

yonasbsd/patternfly-react/.github/actions/setup-project

A set of React components for the PatternFly project.

3/10

Maintained action available

jfrog/frogbot

🐸 Scans your Git repository with JFrog Xray for security vulnerabilities. 🤖

7/10

openzeppelin/moonbeam/.github/workflow-templates/cargo-build

An Ethereum-compatible smart contract parachain on Polkadot

2/10

nvidia/dsx-github-actions/.github/actions/git-tag

Github Action infrastructure for DSX

8/10