Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

actions-rs/toolchain

🛠️ GitHub Action for `rustup` commands

3/10

lfreleng-actions/gerrit-clone-action

Action to bulk clone (in parallel) an entire Gerrit server repository hierarchy

6/10

asyncapi/.github/.github/actions/get-node-version-from-package-lock

Location of all reusable community health files

8/10

pytorch/pytorch/pytorch/.github/actions/ecr-login

Tensors and Dynamic neural networks in Python with strong GPU acceleration

4/10

Maintained action available

step-security/action-shfmt/__builder_checkout_dir__/.github/actions/secure-download-artifact

Run shfmt with reviewdog. Secure drop-in replacement for reviewdog/action-shfmt.

10/10

sfackler/actions/image

2/10

step-security/create-pull-request/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

proyecto-chaucha/chaucha-gha-wallet-generator

Chaucha functions for usage with Github Actions

3/10

envoyproxy/toolshed/actions/foreach

7/10

sonarsource/sonarqube-cli/.actions/get-build-number

Command-line interface for SonarQube with AI agent integration. Scan for secrets and get fast feedback on code quality and security from your terminal.

5/10

Maintained action available