Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
advanced-security/sarif-toolkit/public-layout.tsx
All things SARIF, as an Action
snyk/actions/dotnet
A set of GitHub actions for checking your projects for vulnerabilities.
reviewdog/action-depup
Action which updates dependencies automatically
dustin4444/docs-builder/.github/actions/image
kong/public-shared-actions/slack-actions/workflow-notification
Shared actions available to both public and private repositories
grafana/shared-workflows/actions/docker-export-digest
A public-facing, centralized place to store reusable workflows used by Grafana Labs.
phpstan/phpstan-phpunit/build-infection/.github/actions/setup-php
PHPUnit extensions and rules for PHPStan
rudderlabs/github-action-check-pr-title
Check PR title against conventional commit standard
oaslananka-lab/boardguard
Hardware design review, CI, and release preflight for KiCad projects
lfreleng-actions/node-create-npmrc-action
Creates an NPM configuration file containing credentials
nv-gha-runners/cuda-python/.github/actions/fetch_ctk
CUDA Python: Performance meets Productivity
gottox/irc-message-action
Github Action to Interact with IRC Channels and Users
ashishkurmi/harden-runner
GitHub Action to prevent certain types of software supply chain attacks
ory/ci/sdk/generate
Automation and robots for Ory's CI and CD pipelines
svenstaro/upx-action
Strips and runs upx on binaries
step-security/add-commit-push
โจ Automagically git add, git commit, and git push. Secure drop-in replacement for actions4git/add-commit-push.
walbo/validate-json
Validate JSON files agains their `$schema`
venh/branch-protection
Custom GitHub Action to apply / remove Branch Protection Rules to specified branches of repositories within a GitHub Organization
qoomon/actions--context
Access additional job context informations like current job details (log url, environment, ...) and current deployment details.
ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/fill
Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)