Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

harvester57/checksec.py/.github/actions/common-setup

Checksec tool in Python, Rich output. Based on LIEF

2/10

f3d-app/install-mesa-windows-action

A github action to install mesa library on Windows

4/10

step-security/setup-qemu-action/_next/static/chunks/48234-dabc8ccc8da10d4b.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

8/10

geekyeggo/delete-artifact

A GitHub Action to deletes artifacts within the workflow run.

3/10

step-security/setup-pscale-action

Setup the PlanetScale CLI for GitHub Actions. Secure drop-in replacement for planetscale/setup-pscale-action.

10/10

Maintained by StepSecurity

step-security/publish-to-bcr/this

GitHub release automation for publishing modules to the Bazel Central Registry. Secure drop-in replacement for bazel-contrib/publish-to-bcr.

9/10

waldoapp/gh-action-upload

Waldo GitHub Actions integration

4/10

elastic/vale-rules/report

Elastic Docs' style guide rules for the Vale linter

8/10

actions-rs/tarpaulin

📈 GitHub Action for code coverage reporting with tarpaulin

3/10

hyperledger/indy-shared-gha/.github/actions/get-release-info

4/10

step-security/test-reporting

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for phoenix-actions/test-reporting.

8/10

Maintained by StepSecurity

tiiuae/flakevuln

Scan Nix flakes for vulnerabilities via three-way re-lock diffing, locally or in GitHub Actions.

2/10

softprops/action-gh-release/_next/static/chunks/22594-b6e9d17969c7b505.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10

Maintained action available

step-security/dotenv/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to read .env file and add variables to GITHUB_ENV. Secure drop-in replacement for xom9ikk/dotenv.

8/10

siderolabs/conform

Policy enforcement for your pipelines.

5/10

ivuorinen/gibidify/.github/actions/setup

gibidify is a CLI application written in Go that scans a source directory recursively and aggregates code files into a single text file for LLMs.

6/10

coveo/ui-kit/.github/actions/e2e-atomic-search-nextjs-pages-router

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-79162-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nvidia/nautobot-broker-nats/.github/actions/setup-environment

This is an event broker for nautobot that publishes events to NATS.

4/10

jonathancombs782/copilotforxcode/.github/actions/set-xcode-version

AI coding assistant for Xcode

3/10