Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

gaborcsardi/quarto-actions/setup

3/10

step-security/aqua-installer

Install aqua securely and quickly. Secure drop-in replacement for aquaproj/aqua-installer.

10/10

Maintained by StepSecurity

ericcornelissen/git-tag-annotation-action

GitHub Actions Action to get git tag annotations

5/10

pytorch/torchft/test-infra/.github/actions/pull-docker-image

Fault tolerance for PyTorch (HSDP, LocalSGD, DiLoCo, Streaming DiLoCo)

5/10

Maintained action available

rudderlabs/pr-description-enforcer

3/10

step-security/action-slack-notify/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for sending a notification to a Slack channel. Secure drop-in replacement for rtCamp/action-slack-notify.

10/10

ljharb/actions/node/pack

GitHub actions I use for CI.

4/10

step-security/action-tflint

Run tflint with reviewdog on pull requests to enforce best practices. Secure drop-in replacement for reviewdog/action-tflint.

10/10

Maintained by StepSecurity

yepcode/gha-copy-team

GitHub Action that copies all the contents from the current git repository to one YepCode remote team.

3/10

slsa-framework/slsa-github-generator/.github/actions/detect-workflow

Language-agnostic SLSA provenance generation for Github Actions

5/10

mxcl/xcodebuild

A continuously resilient `xcodebuild` “GitHub Action”. Also it’s the best.

0/10

netlify/actions/cli

6/10

octodemo-resources/github-url-resolver-action

GitHub Action to resolve URLs that are associated with a specific GitHub instance

3/10

dagster-io/dagster-cloud-action/actions/utils/prerun

4/10

step-security/install-poetry/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github action for installing and configuring Poetry. Secure drop-in replacement for snok/install-poetry.

10/10

grafana/setup-k6-action

GitHub Action for installing Grafana k6

7/10

bridgecrewio/yor-action

Github action for Yor

2/10

coveord/spinnaker/.github/actions/build-tag-number

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

zwaldowski/semver-release-action

Create the next semantic version and tag it.

3/10

Maintained action available

step-security/mage-action

GitHub Action for Mage. Secure drop-in replacement for magefile/mage-action.

9/10

Maintained by StepSecurity