Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
docker/build-push-action/public-layout.tsx
GitHub Action to build and push Docker images with Buildx
step-security/setup-inso
Make inso available in your GitHub Actions workflows. Secure drop-in replacement for kong/setup-inso.
step-security/git-tag-action/__builder_checkout_dir__/.github/actions/privacy-check
[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.
mdjahid11978-design/act/.github/actions/choco
Run your GitHub Actions locally ๐
elementary/actions/gettext-template
Reusable GitHub Actions for elementary apps
rudderlabs/airbyte/.github/actions/match-github-to-slack-user
Airbyte is an open-source EL(T) platform that helps you replicate your data in your warehouses, lakes and databases.
openvex/setup-vexctl
VEXctl GitHub Action
ahmadnassri/action-dependabot-auto-merge
Automatically merge Dependabot PRs when version comparison is within range
step-security/release-action/__builder_checkout_dir__/.github/actions/privacy-check
An action which manages a github release. Secure drop-in replacement for ncipollo/release-action.
step-security/dprint-check/__builder_checkout_dir__/.github/actions/privacy-check
GitHub action for running `dprint check`. Secure drop-in replacement for dprint/check.
cloudposse/github-action-docker-image-exists
Github Action check if Docker image exists by pulling it
step-integration-tests/auto-pdpr-test-57545-13/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
step-security/dynamic-matrix
Secure drop-in replacement for coactions/dynamic-matrix.
arcjet/arcjet-js/.github/actions/pin-npm
Arcjet JavaScript (JS) / TypeScript SDK. Stop bots and automated attacks from burning your AI budget, leaking data, or misusing tools with Arcjet's AI security building blocks.
restackio/update-json-file-action
Updates any set of keys inside a json file to the provided values
tanker187/playwright/.github/actions/image
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
dschep/install-pipenv-action
A Github action to install pipenv
kong/slsa-generator/__builder_checkout_dir__/.github/actions/image
Language-agnostic SLSA provenance generation for Github Actions
elastic/cloudbeat/.github/actions/public-layout.tsx
Analyzing Cloud Security Posture
americanexpress/task-status-pr-checker
This is triggered when a pull request is created. If the pull request has pending tasks. The pull request won't be merged and the status is updated on the pull request checks.