Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/zingdevlimited-actions-helpers/deploy-assets
Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks. Secure drop-in replacement for zingdevlimited/actions-helpers.
kong/changed-files/dir1
fork of changed files git action at a known good commit
marko-k0/ic/.github/actions/bazel
Internet Computer blockchain source: the client/replica software run by nodes
surrealdb/rocksdb/.github/actions/install-maven
A library that provides an embeddable, persistent key-value store for fast storage.
canonical/setup-lxd
A GitHub Action to install & configure LXD on a runner.
freshaengineering/merge-gatekeeper
[DevEx] PR merge control - Branch protection enhancement, merge requirements validation, status check aggregation. | TypeScript, GitHub Actions
rapidsai/pre-commit-hooks/.github/actions/earliest-python-version
step-security/devcontainers-ci
A GitHub Action and Azure DevOps Task designed to simplify using Dev Containers (https://containers.dev) in CI/CD systems. Secure drop-in replacement for devcontainers/ci.
jenkins-infra/jenkins-maven-cd-action
step-security/paths-filter/__builder_checkout_dir__/.github/actions/privacy-check
Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter.
zeglius/ghcr-oci-retagger
chad-golden/setup-wpr/stop
A GitHub Action that simplifies recording Windows performance traces using Windows Performance Recorder
nvidia/kai-scheduler/.github/actions/setup-e2e-cluster
KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale
step-security/gha-jobid-action/.github/actions/gha-jobid-action
โ๏ธ GitHub Action to get the current workflow run's Job URL and ID. Secure drop-in replacement for Tiryoh/gha-jobid-action.
tlylt/install-graphviz
Install Graphviz in your GitHub Actions workflow cross-platform
step-security/protobuf-ci/public-layout.tsx
A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.
yonasbsd/navidrome/.github/actions/prepare-docker
๐งโ๏ธ Modern Music Server and Streamer compatible with Subsonic/Airsonic
oxsecurity/megalinter/flavors/documentation
๐ฆ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
p4gs/sscsb-action
Run sscsb supply-chain-security scans in your own CI โ authenticated scan records for tools.sensiblesecurity.xyz/sscsb/
tj-actions/git-cliff
:octocat: Github action to run git-cliff with a custom cliff.toml