Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
grafana/agent/_shared-workflows-dockerhub-login/actions/get-vault-secrets
Vendor-neutral programmable observability pipelines.
pkgr/action/package
GitHub Action for packaging apps as DEB or RPM
step-security/setup-tflint
A GitHub action that installs Terraform linter TFLint. Secure drop-in replacement for terraform-linters/setup-tflint.
lfreleng-actions/zizmor-scan-action
Zizmor scanning tool reusable workflow
envoyproxy/toolshed/gh-actions/gcs/cache/image
projectdiscovery/actions/setup/fill
ProjectDiscovery's Composite Actions
launchdarkly/go-ntlmssp/.github/actions/get-go-version
NTLM/Negotiate authentication over HTTP - fork for use with ld-relay
step-security/quarto-actions/__builder_checkout_dir__/.github/actions/secure-download-artifact
Secure drop-in replacement for quarto-dev/quarto-actions.
step-security/action-send-mail/__builder_checkout_dir__/.github/actions/image
A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.
stacklok/trusty-action
Trusty Dependency Risk Action
dustin4444/checkout
Action for checking out a repo
coveo/ui-kit/.github/actions/e2e-quantic-cypress
Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.
rapidsai/node/.github/actions/public-layout.tsx
GPU-accelerated data science and visualization in node
nvidia/aicr/.github/actions/security-scan
Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes
devops-actions/secure-action-inputs
Run security scan on incoming inputs from GitHub Actions events
harden-runner-canary/kyverno/.github/actions/fill
Kubernetes Native Policy Management
dflook/terraform-fmt-check
GitHub action to check the formatting of terraform files
ory/ci/licenses/check
Automation and robots for Ory's CI and CD pipelines
rinchsan/renovate-config-validator
:white_check_mark: Validate Renovate config in GitHub Actions