Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

actions/maven-dependency-submission-action

GitHub Action for submitting Maven dependencies

4/10

fluxcd/flux2/action

Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.

8/10

di-sukharev/opencommit

top #1 and most feature rich GPT wrapper for git — generate commit messages with an LLM in 1 sec — works with Claude, GPT and every other provider, supports local Ollama models too

4/10

Maintained action available

cisagov/action-apb

GitHub Action to trigger repository rebuilds that haven't occurred recently.

7/10

tellison/git-democracy

2/10

Tjitse-E/clickup-change-status

Github action to change your task status in Clickup

0/10

debianmaster/actions-k3s

Github action for spinning up local k3s instance and running kubectl commands

2/10

siemens/meta-coral/.github/workflows/free-disk-space

ISAR Layer for Coral TPU

6/10

approved-3rd-party-actions/maven-settings-xml-action

Github Action to create maven settings (~/.m2/settings.xml)

2/10

earthly/actions-setup

3/10

elastic/oblt-actions/oblt-cli/cluster-create-custom

7/10

tryghost/actions/actions/label-actions

GitHub Actions to power Ghost development

4/10

pytorch/test-infra/test-infra/.github/actions/setup-linux

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

step-security/actions-hugo/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub Actions for Hugo ⚡️ Setup Hugo quickly and build your site fast. Hugo extended, Hugo Modules, Linux (Ubuntu), macOS, and Windows are supported. Secure drop-in replacement for peaceiris/actions-hugo.

10/10