Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

caffeelake/dotenvx/.github/actions/commit-binary-to-github

a secure dotenv–from the creator of `dotenv`

6/10

simenb/github-actions-cpu-cores

4/10

Maintained action available

coveord/spinnaker/.github/actions/generic-build-publish

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

step-security/release-plz-git-config/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action to configure the git user from a GitHub token. Secure drop-in replacement for release-plz/git-config.

10/10

chronograph-pe/rebase

A GitHub action to rebase pull requests in a repository

2/10

kong/public-shared-actions/pr-previews/cleanup

Shared actions available to both public and private repositories

5/10

rasahq/deploy-tags

2/10

anysphere/delete-cancelled-runs

Deletes cancelled runs for a given workflow

3/10

databricks/setup-bricks

Sets up the Databricks CLI in your GitHub Actions workflow.

5/10

Maintained action available

cisagov/action-apb-dashboard

8/10

aerospike/shared-workflows/.github/actions/extract-version-from-tag

automation workflows

8/10

hiero-ledger/hiero-sdk-cpp/.github/actions/setup-bot

A C++ SDK for Hiero: A C++ toolkit for creating, updating, and interacting with on-ledger assets and smart contracts on Hedera and other Hiero networks

7/10

devantler-tech/ksail/.github/actions/cache-ksail-binary

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10

Maintained action available