Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-33548-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

approved-3rd-party-actions/upload-mobile-app-github-action

The Github action to upload an mobile app file to Kobiton Apps Repo

3/10

sonarsource/sonar-update-center/gh-action_release/main

5/10

actions/setup-java/v4.7.1

Set up your GitHub Actions workflow with a specific version of Java

6/10

officedev/teamsfx-cli-action

teasmfx CI/CD action

0/10

step-security/gh-setup/__builder_checkout_dir__/.github/actions/privacy-check

:octocat: Setup asset of Github releases. Secure drop-in replacement for k1LoW/gh-setup.

10/10

aquasecurity/tfsec-pr-commenter-action

Add comments to pull requests where tfsec checks have failed

4/10

armbian/build

The official build framework for the Armbian Linux distribution. This repository contains the complete toolchain and scripts required to compile custom OS images from source, including kernel configuration, U-Boot handling, and board-specific tweaks for various ARM and ARM64 single-board computers.

8/10

step-security/hide-comment-action

Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

9/10

Maintained by StepSecurity

contentful/create-contentful-app/.github/actions/public-layout.tsx

Bootstrap a Contentful App

6/10

step-security/maturin-action

GitHub Action to install and run a custom maturin command with built-in support for cross compilation. Secure drop-in replacement for PyO3/maturin-action.

9/10

Maintained by StepSecurity

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2017/10/relish-video-production.png

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

tomasreyes/node/node/.github/actions/install-clang

Node.js JavaScript runtime ✨🐢🚀✨

4/10

Maintained action available

asdf-vm/actions/plugins-add

GitHub Actions for the asdf version manager

3/10

step-security/action-read-yaml/__builder_checkout_dir__/.github/actions/privacy-check

Custom github action used to read yaml files, supporting multiple keys and variable replacements. Secure drop-in replacement for pietrobolcato/action-read-yaml.

10/10

sonarsource/sonar-go/.actions/config-gradle

Go Analyzer

6/10

step-security/http-request-action

Create HTTP Requests in GitHub Actions. Secure drop-in replacement for fjogeleit/http-request-action.

10/10

prometheus/promci-artifacts/restore

GitHub Actions for artifact persistence between jobs

6/10

sonarsource/ci-github-actions/promote

CI/CD GitHub Actions

6/10

sredevopsorg/kserve/.github/actions/public-layout.tsx

Standardized Serverless ML Inference Platform on Kubernetes

2/10