Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

redhat-actions/common/action-io-generator

Repository for shared config files, actions and planning.

3/10

step-security/checkov-action

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues. Secure drop-in replacement for bridgecrewio/checkov-action.

10/10

Maintained by StepSecurity

step-security/mikepenz-action-gh-release/__builder_checkout_dir__/.github/actions/privacy-check

📦 :octocat: GitHub Action for creating GitHub Releases. Secure drop-in replacement for mikepenz/action-gh-release.

8/10

gradle/actions/setup-gradle/v4.2.2

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

5/10

Maintained action available

jitsecurity-controls/jit-github-action

The Jit main Github Action

6/10

kong/public-shared-actions/security-actions/scan-rust

Shared actions available to both public and private repositories

5/10

Maintained action available

youyo/awscredswrap

awscredswrap uses temporary credentials for the specified iam role to set a shell environment variable or execute a command.

3/10

launchdarkly/rust-server-sdk/.github/actions/contract-tests

LaunchDarkly Server-Side SDK for Rust

6/10

datadog/datadog-agent-dev

Tool for developing on the Datadog Agent platform

6/10

step-security/publish-crates/__builder_checkout_dir__/.github/actions/fill

GitHub action to get easy publishing of Rust crates. Secure drop-in replacement for katyo/publish-crates.

10/10

technote-space/get-git-comment-action

GitHub actions to get git comment.

2/10

secondlife/setup-cygwin

GitHub action to install Cygwin

5/10

step-security/lcov-reporter-action/__builder_checkout_dir__/.github/actions/privacy-check

Comments a pull request with the code coverage generated by your tests. Secure drop-in replacement for romeovs/lcov-reporter-action.

8/10

caffeelake/servo/.github/actions/setup-python

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

3/10

anysphere/turbo-cache-server

Lightning-fast Turborepo remote cache server as a Github Action or Docker container

2/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR__/.github/actions/wp-content/uploads/2017/10/the-theatre-orchard.png

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

gacts/run-and-post-run

🚀 A simple GitHub action that allows you to execute commands on place and in post-run, once a workflow job has ended.

5/10

Maintained action available

anchore/go-make/.github/actions/bootstrap

8/10

navikt/familie-baks-gha-workflows/.github/actions/deploy

Felles GitHub Actions workflows for Team BAKS sine applikasjoner

8/10

actions-security-demo/script-injection/actions/close-milestone

2/10