Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nv-gha-runners/setup-proxy-cache

GitHub Action for enabling conda/pip package caching in CI workflows via a self-hosted proxy

2/10

grafana/plugin-ci-workflows/actions/plugins/docs/action-info.client.tsx

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

sasobadovinac/mfem/.github/actions/sanitize/restore

Lightweight, general, scalable C++ library for finite element methods

5/10

Maintained action available

launchdarkly/openfeature-ruby-server/.github/actions/build-docs

An OpenFeature provider for the LaunchDarkly Ruby server SDK.

6/10

adoptium/run-aqa

Repository for the Github Action that enables the running of the Adoptium Quality Assurance (AQA) tests

5/10

Maintained action available

ministryofjustice/hmpps-community-accommodation-tier-2-ui/.github/actions/slack_failure_notification

The user interface for Community Accommodation Service Tier 2

8/10

jroehl/gsheet.action

A github action to help with CRUD operations on google sheets.

2/10

step-security/android-emulator-runner/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action for installing, configuring and running hardware-accelerated Android Emulators on macOS virtual machines. Secure drop-in replacement for reactivecircus/android-emulator-runner.

10/10

godaddy-wordpress/setup-wp-cli

Composite Action for setting up WP-CLI in a workflow.

5/10

rojopolis/spellcheck-github-actions

Spell check action

6/10

peter-murray/terraform-variables-action

2/10

scruplelesswizard/split-tests

Github Action for splitting a test suite for parallelization with equal time

4/10

changesets/action

9/10

nvidia/aicr/.github/actions/install-e2e-tools

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

cisagov/action-job-preamble

A GitHub Action to apply cisagov's standard permissions monitoring and runner hardening. This Action is intended to be applied at the beginning of every GitHub Actions job.

8/10

actions/upload-pages-artifact

A composite action for packaging and uploading an artifact that can be deployed to GitHub Pages.

9/10

step-security/run-notebook/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for databricks/run-notebook.

10/10

launchdarkly/php-server-sdk/.github/actions/publish-docs

LaunchDarkly Server-side SDK for PHP

5/10

Maintained action available

nvidia/jax-toolbox/.github/actions/gke-xpk

JAX-Toolbox

6/10

ministryofjustice/opg-github-actions/.github/actions/terraform-version

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

6/10