Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

caffeelake/neqo/.github/actions/pr-comment-data-export

step-security/backport-action/__builder_checkout_dir__/.github/actions/privacy-check

Fast and flexible GitHub action to cherry-pick merged pull requests to selected branches. Secure drop-in replacement for korthout/backport-action.

10/10

dustin4444/noir/.github/actions/setup

Noir is a domain specific language for zero knowledge proofs

5/10

Maintained action available

kong/kongctl/actions/setup

Developer CLI for Kong

7/10

step-security/setup-buildx-action/_next/static/chunks/88447-8031e8e6802c7131.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

9/10

hummingbird-regtech/check-pr-format-action

Checks the PR description body against a configured pattern before allowing merge.

1/10

stainless-api/upload-openapi-spec-action/merge

A GitHub action to build Stainless SDKs.

1/10

nvidia/cccl/.github/actions/workflow-run-job-windows

CUDA Core Compute Libraries

5/10

Maintained action available

likec4/actions

A Github Action for various operations and automation over LikeC4 projects

3/10

caffeelake/bun/bun/.github/actions/setup-bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

4/10

Maintained action available

step-security/setup-gcloud/__builder_checkout_dir__/.github/actions/image

A GitHub Action for installing and configuring the gcloud CLI. Secure drop-in replacement for google-github-actions/setup-gcloud.

9/10

sonarsource/sonarqube-github-c-cpp

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

0/10

launchdarkly/cpp-sdks/.github/actions/install-curl

C++ Client/Server SDKs

6/10

step-integration-tests/auto-pdpr-test-29182-7/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

anatawa12/sh-actions/conventional-commitlint

shell actions by anatawa12

3/10

launchdarkly/php-server-sdk-dynamodb/.github/actions/publish-docs/robots.txt

DynamoDB integration for the LaunchDarkly SDK for Server-side PHP

4/10

grafana/plugin-ci-workflows/actions/plugins/package

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

caffeelake/moby/.github/actions/setup-tracing

The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

7/10

wospm/wospm-checker-github-action

WOSPM Checker Github Action

3/10

gittools/actions/gitversion/public-layout.tsx

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

5/10

Maintained action available