Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

project-dalec/dalec/.github/actions/format-repo

📦 Produce secure packages and containers with declarative configurations

6/10

turtlequeue/setup-babashka

github actions for installing borkdude/babashka

1/10

yonasbsd/bun/bun/.github/actions/setup-bun

Incredibly fast JavaScript runtime, bundler, transpiler and package manager – all in one.

4/10

Maintained action available

githubocto/repo-visualizer

3/10

aidenterfurt/bc-ai-reviewer

Business Central-specific code review composite action with contextual integration (linked issues, app.json files, README files, and coding guidelines).

3/10

nvidia/ncx-infra-controller-core/.github/actions/docker-auth

NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking

6/10

bokuweb/coronarium/comment

Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.

0/10

check-spelling/check-spelling/.git/check-spelling-actions/upload-artifact

Spelling checker action to check spelling in repositories / pull requests / commits

7/10

rasahq/update-pr-branch

Automatically update PR branch that match the criteria. Designed to work with the Github `auto-merge` feature.

2/10

adrise/matter-casting/.github/actions/delete-cache

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10

step-security/detection-sync-action/__builder_checkout_dir__/.github/actions/privacy-check

This is a Github action that will sync a given folder of detections to your RunReveal workspace. Secure drop-in replacement for runreveal/detection-sync-action.

10/10