Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

aerospike/aerospike-client-csharp/.github/actions/build

Aerospike C# Client Library

6/10

yonasbsd/rocksdb/.github/actions/build-for-benchmarks

A library that provides an embeddable, persistent key-value store for fast storage.

5/10

Maintained action available

actions-security-demo/script-injection/actions/metrics-collector

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/tenable-terrascan-action

Mirror from https://github.com/tenable/terrascan-action

3/10

christian-draeger/write-properties

Github action to write java properties files

3/10

step-security/pip-action

Github Action to install Pip packages. Secure drop-in replacement for BSFishy/pip-action.

10/10

Maintained by StepSecurity

wolfi-dev/actions/wolfictl-update-rm

A collection of reusable Github Actions workflows.

8/10

machine-learning-apps/actions-chatops

Actions That Enables ChatOps In a PR Through a GitHub App

2/10

step-security/action-swiftlint/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for SwiftLint. Secure drop-in replacement for norio-nomura/action-swiftlint.

10/10

stripe/openapi/actions/notify-release

An OpenAPI specification for the Stripe API.

8/10

firedancer-io/firedancer/.github/actions/hugepages

Firedancer is Jump Crypto's Solana validator software.

5/10

Maintained action available

turbocoder13/py-lintro/.github/actions/setup-docker

Making linters play nice... Mostly.

8/10

secureblue/secureblue/__builder_checkout_dir__/.github/actions/privacy-check

A security-focused desktop and server linux operating system.

8/10

shayki5/print-workflow-dispatch-inputs

This GitHub Action prints all input values from a `workflow_dispatch` event to the log. Optionally, it can also print all environment variables. It's a simple and effective tool for debugging or verifying input values and environment settings in your manually triggered workflows.

3/10

sonarsource/release-github-actions/update-plugins-deployer

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

5/10

Maintained action available