Assess the risk of third-party GitHub Actions

ash258/scoop-githubactions

Deprecated. Use https://github.com/shovel-org/GithubActions

synopsys-sig/detect-action

2/10

step-security/edit-release/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action for editing an existing release. Secure drop-in replacement for irongut/EditRelease.

kevin-david/promote-play-release

embarkstudios/cargo-deny-action

❌ GitHub Action for cargo-deny 🦀

9/10

bufbuild/buf-breaking-action

rapidsai/shared-actions/telemetry-impls/load-then-clone

6/10

yonasbsd/greptimedb/.github/actions/build-images

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10

step-security/github-actions-slack/__builder_checkout_dir__/.github/actions/privacy-check

Github Action for sending message (and reactions/threads/update/blocks) to Slack - With support for Slack's optional arguments. Secure drop-in replacement for archive/github-actions-slack.

meedamian/github-release

Github Action to create, update, or add files to Github Releases

nvidia/cuequivariance/.github/actions/setup-cuequivariance-torch

cuEquivariance is a math library that is a collective of low-level primitives and tensor ops to accelerate widely-used models, like DiffDock, MACE, Allegro and NEQUIP, based on equivariant neural networks. Also includes kernels for accelerated structure prediction.

step-security/terraform-cloud-provider-publish/__builder_checkout_dir__/.github/actions/privacy-check

An action for publishing terraform providers to a private registry. Secure drop-in replacement for thechrisjohnson/terraform-cloud-provider-publish.

chainguard-dev/setup-chainctl

GitHub Action to install chainctl in your workflow

8/10

firebaseextended/github-actions/firebase-test-lab

pytorch/data/test-infra/.github/actions/check-disk-space

A PyTorch repo for data loading and utilities to be shared by the PyTorch domain libraries.

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins/tiny-carousel-horizontal-slider-plus

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

gocodealone/github-action-matrix-outputs-read

Workaround implementation - Read matrix jobs outputs

mridang/action-dependency-insight

A GitHub Action that analyses project dependencies to flag unused and undeclared packages across JS/TS, PHP, and Python.

2/10

paulhatch/semantic-version

A GitHub Action to generate semantic version from a git repository's commit history.