Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/action-surefire-report/__builder_checkout_dir__/.github/actions/secure-download-artifact

Reports surefire test results as GitHub Pull Request Check. Secure drop-in replacement for ScaCap/action-surefire-report.

10/10

bitwarden/ios/.github/actions/public-layout.tsx

Bitwarden mobile apps (Password Manager and Authenticator) for iOS.

7/10

step-integration-tests/auto-pdpr-test-57427-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

stakekit/signers/.github/composite_actions/initial_setup

The StakeKit Signers allows you to create a signing wallet instance from a mnemonic phrase or ledger app and sign transactions

1/10

neondatabase/gh-workflow-stats-action

GitHub Action to export Workflow statistic into Postgres

4/10

step-security/actions/melange-build

A collection of reusable Github Actions workflows.

7/10

derjuulsn/todo-issue

🤖 GitHub Action which creates Issues from comments in your code

4/10

notaryproject/notation-action/sign

GitHub Actions for signing and verifying artifacts with Notation

5/10

ministryofjustice/opg-github-actions/.github/actions/safe-strings

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

8/10

step-integration-tests/auto-pdpr-test-93245-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/setup-qemu-action/_next/static/chunks/86444-63fbcea17e6349ed.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

10/10

yonasbsd/rspack/.github/actions/artifact/download

A fast Rust-based web bundler.

5/10

Maintained action available

surrealdb/surrealdb/.github/actions/image

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

xt0rted/dotnet-format-problem-matcher

A GitHub Action that registers a problem matcher for dotnet-format's report output

2/10

auguwu/clippy-action

🐻‍❄️📦 GitHub action to run Clippy, an up-to-date and modern version of actions-rs/clippy

3/10

Maintained action available

project-tick/project-tick/.github/actions/uvim/test_artifacts

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10

launchdarkly-labs/pr-downstream

A Github action to create a pull request on a downstream Go repository when changes to a library repository are merged.

4/10

step-security/github-actions-pr-is-linked-to-work-item/__builder_checkout_dir__/.github/actions/privacy-check

Check for linked Azure DevOps work item. Secure drop-in replacement for danhellem/github-actions-pr-is-linked-to-work-item.

10/10

vedantmgoyal2009/winget-releaser

Publish new releases of your application to the Windows Package Manager easily.

5/10

grafana/k6/_shared-workflows-dockerhub-login/actions/get-vault-secrets

A modern load testing tool, using Go and JavaScript

7/10