Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/cosign-installer

Cosign Github Action. Secure drop-in replacement for sigstore/cosign-installer.

10/10

Maintained by StepSecurity

grafana/pr-labeler-action

Adds labels to a PR based on title and/or commit messages

5/10

juanmanuel-tirado/ci-workflows/.github/actions/install-python-deps

Collection of CI actions used by Pantos

3/10

grafana/plugin-actions/package-plugin

6/10

deriv-com/shared-actions/.github/actions/verify_user_in_organization

This repository is dedicated to hosting reusable GitHub Actions YAML files that can be shared across different repositories.

3/10

Maintained action available

harden-runner-canary/little-vm-helper

tool for building and running VMs for development and testing

2/10

pSub/Javadoc-publisher.yml

Generate Javadoc from your maven project and deploy it with GitHub Page.

3/10

ericcornelissen/svgo-action

Automatically run SVGO with GitHub Actions

3/10

devops-actions/actionlint

Action wrapper for `rhysd/actionlint`

7/10

commitizen-tools/commitizen-action

Commitizen github action to bump and create changelog

5/10

databricks/setup-cli

Sets up the Databricks CLI in your GitHub Actions workflow.

8/10

actions/create-github-app-token

GitHub Action for creating a GitHub App Installation Access Token

9/10

ivuorinen/actions/validate-inputs

ivuorinen's shared actions

7/10

corca-ai/local-cache

This action allows caching dependencies and build outputs to improve workflow execution time on self hosted machine.

3/10

irongut/codecoveragesummary

A GitHub Action that reads Cobertura format code coverage files and outputs a text or markdown summary.

7/10

eviden-actions/clean-self-hosted-runner

GitHub Actions to clean the working directory on self hosted runners

6/10

jandelgado/gcov2lcov-action

Github action to convert go coverage files to lcov format

4/10

azure/k8s-create-secret

GitHub Action to create Kubernetes cluster secrets

9/10

step-security/action-install-gh-release/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub Action to install the Github Release binaries. Secure drop-in replacement for jaxxstorm/action-install-gh-release.

10/10

defenseunicorns/setup-zarf

GitHub Action for Installing and Configuring Zarf

4/10