Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

elastic/oblt-actions/google/auth

7/10

zentered/vercel-preview-url

GitHub Action to receive the deployment preview URL from Vercel

5/10

Maintained action available

JoftheV/pytorch/.github/actions/pytest-cache-upload

Tensors and Dynamic neural networks in Python with strong GPU acceleration

3/10

dimitarvdimitrov/shared-workflows/actions/go-flaky-tests

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

5/10

Maintained action available

optum/sourcehawk-scan-github-action

This action runs a sourcehawk scan on the repository source code

5/10

fjogeleit/http-request-action

Create HTTP Requests in GitHub Actions

6/10

JoftheV/pytorch/.github/actions/get-workflow-job-id

Tensors and Dynamic neural networks in Python with strong GPU acceleration

3/10

MathieuSoysal/file-updater-for-release

Update automatically the old version in your readme (or other files) with your new tag version.

4/10

azure/setup-helm

Github Action for installing Helm

9/10

step-security/action-cond

Conditional value for GitHub Action - missing expression for GitHub Actions . Secure drop-in replacement for haya14busa/action-cond.

10/10

Maintained by StepSecurity

step-security/maven-settings-xml-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Github Action to create maven settings (~/.m2/settings.xml). Secure drop-in replacement for whelk-io/maven-settings-xml-action.

10/10

chartboost/ruff-action

A GitHub Action for Ruff

5/10

bgd-labs/github-workflows/.github/actions/foundry-setup

a collection of github workflows used at bgd

4/10

step-security/setup-just

🤖 GitHub Action to install the just command runner. Secure drop-in replacement for extractions/setup-just.

10/10

Maintained by StepSecurity

python-semantic-release/upload-to-gh-release

DEPRECATED: Upload artefacts to GitHub Releases using Python Semantic Release

4/10

step-security/helm-gh-pages/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A GitHub Action for publishing Helm charts to Github Pages. Secure drop-in replacement for stefanprodan/helm-gh-pages.

10/10

bazel-contrib/publish-to-bcr

A GitHub app that mirrors releases of your Bazel ruleset to the Central Registry

4/10

hacs/action

Repository validator action for HACS

6/10

elastic/cloudbeat/.github/actions/aws-asset-inventory-ci

Analyzing Cloud Security Posture

6/10

quarto-dev/quarto-actions/setup

7/10