Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia-omniverse/isaaclab/.github/actions/upload-omni-github-test-results

Unified framework for robot learning built on NVIDIA Isaac Sim

5/10

Maintained action available

launchdarkly/go-ntlmssp/.github/actions/get-go-version

NTLM/Negotiate authentication over HTTP - fork for use with ld-relay

6/10

step-security/quarto-actions/__builder_checkout_dir__/.github/actions/secure-download-artifact

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10

step-security/action-send-mail/__builder_checkout_dir__/.github/actions/image

A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.

10/10

stacklok/trusty-action

Trusty Dependency Risk Action

0/10

dustin4444/checkout

Action for checking out a repo

5/10

Maintained action available

coveo/ui-kit/.github/actions/e2e-quantic-cypress

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

rapidsai/node/.github/actions/public-layout.tsx

GPU-accelerated data science and visualization in node

3/10

nvidia/aicr/.github/actions/security-scan

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

devops-actions/secure-action-inputs

Run security scan on incoming inputs from GitHub Actions events

6/10

proudust/gh-describe

Emulate `git describe --tags` for shallow clone repositories.

3/10

simonmarty/aws-secretsmanager-get-secrets/.github/actions/public-layout.tsx

3/10

mfem/github-actions/public-layout.tsx

One repo for all mfem GitHub Actions

4/10

harden-runner-canary/kyverno/.github/actions/fill

Kubernetes Native Policy Management

3/10

step-security/semantic-release-action

GitHub Action for Semantic Release. Secure drop-in replacement for cycjimmy/semantic-release-action.

10/10

Maintained by StepSecurity

ivylikethevine/instadroid/.github/actions/fetch-latest-artifact

6/10

dflook/terraform-fmt-check

GitHub action to check the formatting of terraform files

3/10

ory/ci/licenses/check

Automation and robots for Ory's CI and CD pipelines

5/10

Maintained action available

codota/github-action-get-latest-release

A Github action to get the latest release from another repository.

0/10

step-integration-tests/auto-pdpr-test-42790-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10