Assess the risk of third-party GitHub Actions

coveo/platform-client/.github/actions/merge-commit

Official Coveo Cloud APIs JavaScript Client

suzuki-shunsuke/tfaction/install

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

gaborcsardi/quarto-actions/setup

step-security/aqua-installer

Install aqua securely and quickly. Secure drop-in replacement for aquaproj/aqua-installer.

Maintained by StepSecurity

ericcornelissen/git-tag-annotation-action

GitHub Actions Action to get git tag annotations

5/10

pytorch/torchft/test-infra/.github/actions/pull-docker-image

Fault tolerance for PyTorch (HSDP, LocalSGD, DiLoCo, Streaming DiLoCo)

5/10

rudderlabs/pr-description-enforcer

step-security/action-slack-notify/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for sending a notification to a Slack channel. Secure drop-in replacement for rtCamp/action-slack-notify.

ljharb/actions/node/pack

GitHub actions I use for CI.

step-security/action-tflint

Run tflint with reviewdog on pull requests to enforce best practices. Secure drop-in replacement for reviewdog/action-tflint.

Maintained by StepSecurity

yepcode/gha-copy-team

GitHub Action that copies all the contents from the current git repository to one YepCode remote team.

slsa-framework/slsa-github-generator/.github/actions/detect-workflow

Language-agnostic SLSA provenance generation for Github Actions

5/10

mxcl/xcodebuild

A continuously resilient `xcodebuild` “GitHub Action”. Also it’s the best.

0/10

netlify/actions/cli

6/10

octodemo-resources/github-url-resolver-action

GitHub Action to resolve URLs that are associated with a specific GitHub instance

dagster-io/dagster-cloud-action/actions/utils/prerun

step-security/install-poetry/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github action for installing and configuring Poetry. Secure drop-in replacement for snok/install-poetry.