Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
actions/first-interaction
An action for filtering pull requests and issues from first-time contributors
grafana/grafana/.grafana-main/.github/workflows/actions/changelog
The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
vendic/magento2-smile-elasticsuite-disable-tracking/.github/actions/setup
Disable tracking and telemetry from Smile Elasticsuite and remove tracking.js
step-security/render-template/__builder_checkout_dir__/.github/actions/public-layout.tsx
GitHub Action to render file based on template and passed variables. Secure drop-in replacement for chuhlomin/render-template.
dustin4444/slsa-github-generator/.github/actions/compute-sha256
Language-agnostic SLSA provenance generation for Github Actions
plettich/action-codespell
Run codespell with reviewdog
actions-rs/cargo
๐ฆ GitHub Action for Rust `cargo` command
step-security/setup-nuget/__builder_checkout_dir__/.github/actions/image
Secure drop-in replacement for nuget/setup-nuget.
lucassabreu/comment-coverage-clover
Github Action that automatically adds a comment with a summary of coverage reports (clover)
bluwy/release-for-reddit-action
๐๏ธ Submit a Reddit post about your release in GitHub Actions
crs-k/stale-branches
Finds and deletes stale branches
mario-sangar/upload-s3-action
github action for upload to S3 โ๏ธ
smartcontractkit/.github/actions/ctf-run-tests
reusable GHA workflows and actions
asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-brand-name.svg
Build environment matching a FuzzBot running Ubuntu 22.04
reviewdog/action-actionlint
run actionlint with reviewdog
jenseng/dynamic-uses/image
Dynamically resolve and use another GitHub action
sendgrid/dx-automator/actions/release
A tool for managing priorities across multiple GitHub repositories
3shapeinternal/pr-labeler2-action
The GitHub action which sets the labels on Pull Requests depending on their content
sgammon/hashlock
Library, CLI, and GitHub Action for verifying hashes
pb33f/vacuum-action
The official GitHub action for vacuum, OpenAPI linter