Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

bubkoo/auto-assign

🎯 Automatically add reviewers/assignees to issues/PRs

2/10

boecht/birre/.github/actions/uv-env

BiRRe (Bitsight Rating Retriever) MCP server provides access to BitSight security rating data without installation

6/10

nelonoel/branch-name

GitHub Action for exporting current branch name as an environment variable

3/10

prisma/create-prisma-postgres-database-action

5/10

gradle/gradle-command-action

Execute your Gradle build and trigger dependency submission

6/10

actions-security-demo/script-injection/.github/actions/test-coverage-processor

2/10

grafana/community-contributions/pkg/build/actions/bump-version

External contributor PR workflow testing sandbox

2/10

step-security/action-download-artifact/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

10/10

yonasBSD/wazuh/.github/actions/5_builderpackage_linux-smoke-upgrade-test

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

coveord/spinnaker/.github/actions/version

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

bgd-labs/github-workflows/.github/actions/foundry-test

a collection of github workflows used at bgd

4/10

peaceiris/actions-mdbook

GitHub Actions for mdBook (rust-lang/mdBook) ⚡️ Setup mdBook quickly and build your site fast. Linux (Ubuntu), macOS, and Windows are supported.

4/10

lovetoknow/slackify-markdown-action

GitHub Action to convert markdown into Slack's mrkdwn.

3/10

grafana/hackathon-dragndrop-grafana/actions/backport

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10