Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

pytorch/hub/test-infra/.github/actions/chown-directory

Submission to https://pytorch.org/hub/

2/10

coveo/ui-kit/.github/actions/playwright-quantic

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

step-security/gh-actions-lua/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action for Lua/LuaJIT. Secure drop-in replacement for leafo/gh-actions-lua.

10/10

warjiang/setup-skopeo

A GitHub Action for installing and configuring the skopeo CLI.

2/10

github/gh-aw/actions/setup

GitHub Agentic Workflows

7/10

c-hive/gha-npm-cache

1-liner npm install cache for GitHub Actions

2/10

mercymeilya/last-workflow-status

Get the conclusion/status of the previous workflow run on the current branch. Useful for detecting build status changes (e.g., send a Slack notification only when a build goes from failing to passing).

4/10

anysphere/buf-setup-action

2/10

regclient/actions

7/10

aliyun/acr-scan

Scan Docker images in ACR

3/10

solana-developers/github-actions/setup-all

A collection of github actions to build, idl upload and verify programs. With Squads support

2/10

titoportas/update-project-fields

Gthub action for Project (beta) management. Allows to update fields

3/10

b4b4r07/action-github-comment

GitHub Actions to post a text to GitHub issue / pull request

2/10

reality2byte/setup-python

Set up your GitHub Actions workflow with a specific version of Python

4/10

v1vhm/gittools-actions/gitversion/setup

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

2/10

coveo/ui-kit/.github/actions/publish-pr-review-site

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

actions/upload-release-asset

An Action to upload a release asset via the GitHub Release API

6/10

peter-evans/dockerhub-description

A GitHub action to update a Docker Hub repository description from README.md

6/10

wzieba/appcenter-github-action

This action uploads artifacts (.apk or .ipa) to Visual Studio App Center.

4/10

yonasbsd/buck2/.github/actions/build_bootstrap

Build system, successor to Buck

3/10

Maintained action available