Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
projectdiscovery/actions/golangci-lint/fill
ProjectDiscovery's Composite Actions
burningalchemist/action-gh-nfpm
nFPM Packager action
rapidsai/sccache/.github/actions/artifact_failure
Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.
tomhjp/gh-action-jira-comment
Add a comment to a Jira issue using GitHub actions
intheclouddan/publish-vscode-extension
GitHub action to publish your VS Code Extension to the Open VSX Registry or Visual Studio Marketplace.
step-integration-tests/auto-pdpr-test-56791-15/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
zephyrproject-rtos/action-first-interaction
An action for filtering pull requests and issues from first-time contributors
pozetroninc/github-action-get-latest-release
A Github action to get the latest release from another repository.
nvidia/kata-containers/.github/cargo-deny-composite-action
Kata containers is an implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.
rodri-oliveira-dev/poc-arquitetura/.github/actions/setup-dotnet
.NET architecture PoC for distributed services with CQRS, Kafka, PostgreSQL, Outbox, DLQ, observability and CI quality gates.
yonasbsd/opendal/.github/actions/fuzz_test
Apache OpenDAL: access data freely.
kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-upload-artifact
Language-agnostic SLSA provenance generation for Github Actions
ledgerhq/ledger-live/tools/actions/composites/cache/download
Mono-repository for Ledger Wallet apps and related packages
sonarsource/release-github-actions/get-release-version
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.
launchdarkly/ruby-server-sdk/.github/actions/check
LaunchDarkly Server-side SDK for Ruby
hiero-ledger/hiero-ethereum-execution-spec-tests/.github/actions/build-evm-client/geth
Specification for the Execution Layer. Tracking network upgrades.
aquanow/usdu-smart-contracts/.github/actions/hardhat-setup
Source repository for the smart contracts powering the USD-backed stablecoin issued by Universal Digital Intl Limited (โUniversalโ).
step-integration-tests/auto-pdpr-test-74755-1/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
fortify/github-action/without-artifacts
Fortify GitHub Actions
dustin4444/metamask-mobile/.github/actions/smart-e2e-selection
Mobile web browser providing access to websites that use the Ethereum blockchain