Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

neondatabase/neon/.github/actions/prepare-for-subzero

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

3/10

NVIDIA/nvrc/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

The NVRC project provides a Rust binary that implements a simple init system for microVMs.

6/10

devcontainers/action

GitHub Action to build & publish your own dev container assets

6/10

sredevopsorg/metabase/.github/actions/get-latest-release-branch

The simplest, fastest way to get business intelligence and analytics to everyone in your company :yum:

2/10

karancode/kustomize-github-action

:european_castle: Github action for kustomize

3/10

dittowords/ditto-github-action

GitHub Action that allows users to either schedule or manually pull updated Ditto text

3/10

ministryofjustice/hmpps-complexity-of-need/.github/actions/package_veracode_artifact

Complexity Level Microservice

5/10

joerick/pr-labels-action

A Github action that extracts labels from the PR that this build belongs to, and makes them available to other actions.

1/10

rrainn/dynamodb-action

📦 GitHub Action - DynamoDB Local GitHub Action

3/10

coveo/stew/.github/workflows/actions/publish-to-pypi

Complete Python CI/CD solution built around Poetry.

5/10

Maintained action available

billy1624/release-comment-on-pr

Comment on Pull Requests included in Release

3/10

cookieai-jar/teleport/.github/actions/prepare-workspace

The easiest, and most secure way to access and protect all of your infrastructure.

4/10

Maintained action available

step-security/action-add-labels

🏷️ GitHub Action to add labels. Secure drop-in replacement for actions-ecosystem/action-add-labels.

10/10

Maintained by StepSecurity

step-security/ghaction-setup-containerd

GitHub Action to set up containerd. Secure drop-in replacement for crazy-max/ghaction-setup-containerd.

9/10

Maintained by StepSecurity

rickstaa/action-update-semver

Updates major/minor release tags on a tag push.

3/10

vmactions/netbsd-vm

Use NetBSD in github actions

6/10

technote-space/create-pr-action

GitHub Actions to manage PullRequest

3/10

grafana/loki/actions/metrics-collector

Like Prometheus, but for logs.

6/10

arduino/setup-protoc

GitHub Action to setup the protoc compiler for protocol buffers

6/10

elide-dev/elide/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

fast, all-in-one, AI-native, multi-lang, runtime

6/10