Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

galargh/stale

Marks issues and pull requests that have not had recent interaction

2/10

github/accessibility-alt-text-bot

An action to remind users to add alt text on Issues, Pull Requests, and Discussions

9/10

actions-security-demo/pytorch/.github/actions/teardown-win

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

cadwallion/publish-rubygems-action

2/10

opentofu/setup-opentofu

7/10

legoktm/gh-action-build-deb

GitHub Action for building Debian packages on Buster

2/10

grafana/mimir-prometheus/.github/promci/actions/build

7/10

defExistentia/coder-2.24.3-modified/.github/actions/upload-datadog

2/10

yonasBSD/greptimedb/.github/actions/sqlness-test

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10

Maintained action available

notdodo/erfiume_bot

Bot per leggere i livelli idrometrici dei fiumi dell'Emilia Romagna riportati da allertameteo.regione.emilia-romagna.it.

6/10

astral-sh/setup-uv

Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/

6/10

yonasBSD/grafana/pkg/build/actions/bump-version

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10

Maintained action available

TreTuna/sync-branches

GitHub Action to sync back a branch to another after a merge.

2/10

siemens/wasm-micro-runtime/.github/actions/install-wasi-sdk-wabt

WebAssembly Micro Runtime (WAMR)

7/10

chronograph-pe/auto-assign-action

An action which adds reviewers to the pull request when the pull request is opened.

0/10

fermyon/actions/spin/setup

4/10

projectdiscovery/actions/flamegraph

ProjectDiscovery's Composite Actions

7/10

valentijnscholten/release-drafter

Drafts your next release notes as pull requests are merged into master.

2/10

vivaldi-va/testcafe-html-report

GH action to create an HTML report using testcafe JSON report output

0/10

step-security/setup-crate

📦 GitHub Action to install a Rust crate from a GitHub release. Secure drop-in replacement for extractions/setup-crate.

10/10

Maintained by StepSecurity