Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

github/accessibility-alt-text-bot

An action to remind users to add alt text on Issues, Pull Requests, and Discussions

8/10

actions-security-demo/pytorch/.github/actions/teardown-win

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

cadwallion/publish-rubygems-action

2/10

opentofu/setup-opentofu

7/10

legoktm/gh-action-build-deb

GitHub Action for building Debian packages on Buster

3/10

googlecloudplatform/functions-framework-conformance/.github/actions/client/resolve-latest

A Tool for Validating Conformance to the Functions Framework Contract

4/10

grafana/mimir-prometheus/.github/promci/actions/build

7/10

notdodo/erfiume_bot

Bot per leggere i livelli idrometrici dei fiumi dell'Emilia Romagna riportati da allertameteo.regione.emilia-romagna.it.

5/10

Maintained action available

astral-sh/setup-uv

Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/

7/10

step-security/setup-buildx-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

siemens/wasm-micro-runtime/.github/actions/install-wasi-sdk-wabt

WebAssembly Micro Runtime (WAMR)

6/10

chronograph-pe/auto-assign-action

An action which adds reviewers to the pull request when the pull request is opened.

0/10

fermyon/actions/spin/setup

5/10

lironer/bundlemon-action

A free open-source GitHub action that helps you to monitor your bundle size on every commit and alerts you on changes.

2/10

projectdiscovery/actions/flamegraph

ProjectDiscovery's Composite Actions

5/10

valentijnscholten/release-drafter

Drafts your next release notes as pull requests are merged into master.

2/10

vivaldi-va/testcafe-html-report

GH action to create an HTML report using testcafe JSON report output

0/10

step-security/setup-crate

📦 GitHub Action to install a Rust crate from a GitHub release. Secure drop-in replacement for extractions/setup-crate.

8/10

Maintained by StepSecurity

dsanders11/project-actions/find-project

A collection of actions for automating GitHub projects

5/10

Maintained action available

open-edge-platform/orch-ci/.github/actions/bootstrap

Central hub for shared continuous integration (CI) workflows and actions for the Open-Edge-Platform project

6/10