Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/setup-buildx-action/_next/static/chunks/98234-276d5b47fca26766.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

step-integration-tests/auto-pdpr-test-01811-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

coveo/plasma/.github/actions/storybook

Plasma components implemented with React!

5/10

Maintained action available

huaxk/postgis-action

GitHub Action to setup a PostgreSQL database with Postgis.

3/10

sonarsource/sonarlint-omnisharp/.actions/get-build-number

7/10

yonasbsd/buck2/.github/actions/build_example_persistent_worker

Build system, successor to Buck

3/10

Maintained action available

huntridge-labs/argus/.github/actions/%5c%5c%5c%22http%3a/argus.huntridgelabs.com/%5c%5c%5c%22%5cu003elearn

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

google/clusterfuzzlite/actions/run_fuzzers

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

5/10

actionite/secrets-sync-action

A Github Action that can sync secrets from one repository to many others.

3/10

xampprocky/create-release

An Action to create releases via the GitHub Release API

2/10

anchore/go-collections/.github/actions/bootstrap

7/10

step-security/action-remove-labels/__builder_checkout_dir__/.github/actions/privacy-check

🏷️ GitHub Action to remove labels. Secure drop-in replacement for actions-ecosystem/action-remove-labels.

8/10

mrsquaare/ssh-setup-action

Setup SSH GitHub Action

3/10

hugoalh/scan-virus-ghaction

A GitHub Action to scan virus (including malicious file and malware).

5/10

grafana/mimir-loki/.github/actions/public-layout.tsx

Like Prometheus, but for logs.

2/10

aschmidtrl/attach-labels

🏷️ A GitHub Action that attach label(s) to a PR or an Issue.

2/10

step-security/setup-tflint/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub action that installs Terraform linter TFLint. Secure drop-in replacement for terraform-linters/setup-tflint.

8/10

kosli-dev/reusable-actions/.github/actions/send-ci-failure-slack-message

Reusable github actions

6/10

shiftescape/auto-label-pulls

⚡️ Automates the process of assigning labels to your pull requests based on the target branch

4/10

step-security/increment/aaa

Action to increment a repository variable. Secure drop-in replacement for action-pack/increment.

10/10