Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

dargon789/safe-wallet-web/.github/actions/yarn

Safe{Wallet} – multisig EVM wallet

5/10

Maintained action available

pytorch/data/test-infra/.github/actions/setup-binary-upload

A PyTorch repo for data loading and utilities to be shared by the PyTorch domain libraries.

3/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/themes/hestia-will-2/assets/js/material.js

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

jahid11978/openclaw-3/.github/actions/ensure-base-commit

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

3/10

project-tick/project-tick/.github/actions/setup-dependencies/windows

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10

jahid11978/hermes-agent/.github/actions/get-app-token

The agent that grows with you

3/10

celo-org/developer-tooling/.github/actions/upload-codecov

🛠️ SDKs and CLI for interacting with Celo

4/10

nautechsystems/nautilus_trader/.github/actions/common-setup

Production-grade Rust-native trading engine with deterministic event-driven architecture

8/10

step-integration-tests/auto-pdpr-test-74755-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/protobuf-ci/../../_actions/current/internal/setup-runner

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

sonarsource/sonar-lits/.actions/get-build-number

Language plugins Integration Tests Support

7/10

step-security/edit-release

A GitHub Action for editing an existing release. Secure drop-in replacement for irongut/EditRelease.

10/10

Maintained by StepSecurity

templum/govulncheck-action

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

2/10