Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/increment/aaa

Action to increment a repository variable. Secure drop-in replacement for action-pack/increment.

10/10

pytorch/pytorch/.github/actions/build-external-packages

Tensors and Dynamic neural networks in Python with strong GPU acceleration

5/10

Maintained action available

step-security/action-rubocop

Run rubocop with reviewdog 🐶. Secure drop-in replacement for reviewdog/action-rubocop.

10/10

Maintained by StepSecurity

technicityworks/action-helm-chartmuseum

3/10

pypa/gh-action-pypi-publish/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish

5/10

bitwarden/gh-actions/fill

Bitwarden-utilized GitHub Actions.

6/10

anchore/vunnel/.github/actions/public-layout.tsx

Tool for collecting vulnerability data from various sources (used to build the grype database)

7/10

yonasbsd/clickhouse/.github/actions/debug

ClickHouse® is a real-time analytics DBMS

5/10

Maintained action available

grafana/alloy/.github/actions/homebrew-bump-formula

OpenTelemetry Collector distribution with programmable pipelines

6/10

openzeppelin/openzeppelin-contracts/.github/actions/gas-compare

OpenZeppelin Contracts is a library for secure smart contract development.

6/10

launchdarkly/rust-eventsource-client/.github/actions/public-layout.tsx

Server-sent events (SSE) client implementation for Rust

6/10

stcarolas/setup-maven/api/download

Set up your GitHub Actions workflow with a specific version of Apache Maven

2/10

step-integration-tests/auto-pdpr-test-75874-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

newton-physics/mujoco-usd-converter/.github/actions/bootstrap

A MuJoCo to OpenUSD Data Converter

8/10

cerbos/cerbos-setup-action

A GitHub action to setup Cerbos and Cerbosctl binaries

7/10

tschm/token-mint-action

Creates an api token for trusted publishing in pypi

3/10

ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/setup-zap

HMPPS Manage People on Probation UI

7/10

ministryofjustice/fala/.github/actions/public-layout.tsx

Find a Legal Adviser

7/10

yonasbsd/surrealdb/.github/actions/install-tools

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10

Maintained action available

cloudposse/actions/github/slash-command-dispatch

Our Library of GitHub Actions

3/10