Assess the risk of third-party GitHub Actions

anthropics/claude-plugins-community/.github/actions/bump-plugin-shas

Community plugin marketplace for Claude Cowork and Claude Code. Read-only mirror — submit plugins at clau.de/plugin-directory-submission.

6/10

launchdarkly/go-semver/.github/actions/coverage

semantic version parsing and comparison package

step-integration-tests/auto-pdpr-test-38646-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

yonasbsd/ghost/.github/actions/setup-playwright

Independent technology for modern publishing, memberships, subscriptions and newsletters.

adrise/connectedhomeip/.github/actions/upload-size-reports

Fork of project-chip/connectedhomeip

3/10

ai-dynamo/dynamo/.github/actions/setup-deploy-namespace

A Datacenter Scale Distributed Inference Serving Framework

4/10

brycensranch/read-properties-action

read java properties action is overcomplicated and doesnt work

step-security/dynamic-uses/../dynamic-uses

Dynamically resolve and use another GitHub action

10/10

ljharb/actions/bun/install

GitHub actions I use for CI.

kong/gh-storage/fill

Use a GitHub hosted repository to store and retrieve files

3/10

dustico/dusti-lock

DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.

6/10

launchdarkly/openfeature-node-server/.github/actions/fill

An open feature provider for the LaunchDarkly node SDK.

dmptrluke/django-cjswidget/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

A replacement for the Select widget with fancy new features - powered by choices.js!

projectdiscovery/actions/setup/nuclei

ProjectDiscovery's Composite Actions

7/10

liri-infra/qmllint-action

:heavy_plus_sign: Validates QML and JavaScript files

asdf-vm/actions/plugin-test

GitHub Actions for the asdf version manager

equinor/cc-components/.github/actions/fill

Components and apps for CC.

mig4/setup-bats

GitHub Action to setup BATS testing framework

3/10

sbdchd/squawk-action

Github Action for Linting Postgres Migrations with Squawk