Assess the risk of third-party GitHub Actions

oxsecurity/megalinter/flavors/go

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

grafana/mimir-loki/.github/actions/fill

Like Prometheus, but for logs.

0/10

envoyproxy/toolshed/gh-actions/appauth

6/10

sean0x42/markdown-extract

Extract sections of a markdown file. Useful for automatically extracting changelogs

4/10

caffeelake/cilium/.github/actions/kvstore

eBPF-based Networking, Security, and Observability

desktop-app/action_issue_closer

2/10

sersoft-gmbh/swift-coverage-action

GitHub action that converts code coverage files from xcodebuild or swift test runs for processing with e.g. codecov.

falti/dotenv-action

Provide common parameters via .env file

7/10

canonical/documentation-workflows/inclusive-language

Reusable workflows for the documentation team

metamask/github-tools/.github/actions/image

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

mdjahid11978-design/neon/.github/actions/public-layout.tsx

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

oliversalzburg/action-label-manager

Manage labels on GitHub repositories easily

contrast-security-oss/rust-toolchain

Concise GitHub Action for installing a Rust toolchain

4/10

huntridge-labs/argus/.github/actions/scanner-clamav

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.