Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

thejeff77/action-bump-semver

⏫ GitHub Action to bump the semver version up

2/10

envoyproxy/toolshed/actions/github/artifact/download

6/10

elastic/apm-agent-java/.github/workflows/unstash

8/10

chainguard-images/actions/apko-publish

GitHub actions for the chainguard-images

8/10

zdurham/s3-upload-github-action

Upload github action for sending files to s3

3/10

step-security/setup-yq/__builder_checkout_dir__/.github/actions/secure-download-artifact

Sets up YQ, yet-another-markup-language-query-er, for use in your Github Actions workflow. Secure drop-in replacement for chrisdickinson/setup-yq.

9/10

ministryofjustice/laa-data-access-api/.github/actions/cleanup_branch

8/10

chick-fil-a/gha-docker-run

A GitHub Action to run a docker container with current workspace mapped and github actions env vars available.

2/10

mcdonnnj/actions-permissions/monitor

GitHub token permissions Monitor and Advisor actions

2/10

eliheady/dnscontrol-action-experimental

4/10

step-security/install-jq-action

Multiplatform jq installer action. Secure drop-in replacement for dcarbone/install-jq-action.

10/10

Maintained by StepSecurity

step-security/ssh-key-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

9/10

jbutcher5/read-yaml

A GitHub Action to read yaml files.

3/10

matlab-actions/run-tests

Run MATLAB and Simulink tests and generate artifacts.

5/10

ministryofjustice/opg-reports/.github/actions/terraform

Development repository: Managed by opg-org-infra & Terraform

8/10

nvidia/aicr/.github/actions/go-test

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

commit-check/commit-check-action

Commit Check GitHub Action

6/10

step-security/setup-just/__builder_checkout_dir__/.github/actions/secure-download-artifact

🤖 GitHub Action to install the just command runner. Secure drop-in replacement for extractions/setup-just.

10/10

step-security/close-milestone

A Github action to remove a milestone by the milestone's name. Secure drop-in replacement for Akkjon/close-milestone.

9/10

Maintained by StepSecurity

mgreau/actions/git-bump-tag-semver

A collection of reusable Github Actions workflows.

3/10