Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

flexion/notifications-admin/.github/actions/image

The UI of Notify.gov

0/10

chainguard-actions/peaceiris-actions-gh-pages

2/10

step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

A GitHub action that installs or updates the gh CLI. Secure drop-in replacement for sersoft-gmbh/setup-gh-cli-action.

10/10

step-security/launchdarkly-gha-flags

Evaluate LaunchDarkly flags in your GitHub Action workflow. Secure drop-in replacement for launchdarkly/gha-flags.

10/10

Maintained by StepSecurity

centml/dynamo/.github/actions/install-vcluster-cli

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

step-security/action-maven-publish

📦 GitHub Action for automatically publishing Maven packages. Secure drop-in replacement for samuelmeuli/action-maven-publish.

10/10

tempoxyz/gh-actions/vendor/changesets/action

Reusable GitHub Actions for Tempo

4/10

Maintained action available

grafana/sm-renovate/actions/public-layout.tsx

Shared workflows for Renovate setup as used by Synthetic Monitoring

4/10

rapidsai/devcontainers/.github/actions/copy-common-scripts

5/10

Maintained action available

rapidsai/shared-actions/shared-actions/telemetry-impls/github-actions-job-info

6/10

elide-dev/elide/__builder_checkout_dir__/.github/actions/fill

fast multi-lang runtime

4/10

Maintained action available

nvidia-rtx/godot/.github/actions/fill

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10

Maintained action available

launchdarkly/go-ntlm-proxy-auth/.github/actions/get-go-version

Authorize to an NTLM Proxy for a HTTP(S) connection in Golang (LaunchDarkly fork)

5/10

nodoubtz-record-label/pipelines/.github/actions/github-disk-cleanup

Machine Learning Pipelines for Kubeflow

4/10

rall/blue-howdy/.github/actions/build-image

Layering howdy on top of bluefin-dx-nvidia

3/10

yonasbsd/loki/.github/actions/setup-k3d

Like Prometheus, but for logs.

3/10

Maintained action available

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/ci

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

4/10

sorah/sts-cat/.github/actions/exchange-token

Yet another GitHub STS, aims to allow easy self-host and be cloud-agnostic

2/10

deepsourcelabs/test-coverage-action

☂️ GitHub Action for DeepSource Test Coverage analyzer reporting.

4/10

octopusdeploy/await-task-action

| Public | :octocat: GitHub Action to Wait/Watch an Execution in Octopus Deploy

7/10