Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

metamask/github-tools/.github/actions/log-merge-group-failure

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

5/10

Maintained action available

step-security/action-setup/__builder_checkout_dir__/.github/actions/privacy-check

Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.

10/10

trunk-io/trunk-action

Trunk.io GitHub Action

8/10

coinbase/cdp-sdk/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Client libraries for managing EVM and Solana wallets while relying on CDP to secure private keys.

6/10

yonasbsd/affine/.github/actions/server-test-env

There can be more than Notion and Miro. AFFiNE is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

4/10

Maintained action available

mr-smithers-excellent/docker-build-push

Docker Build & Push GitHub Action

6/10

step-security/ftp-deploy-action

Deploys a GitHub project to a FTP server using GitHub actions. Secure drop-in replacement for samkirkland/ftp-deploy-action.

8/10

Maintained by StepSecurity

energinet-datahub/.github/.github/actions/dotnet-check-license

Repository containing the common .github items, such as actions, workflows etc.

8/10

anchore/fangs/.github/actions/bootstrap

7/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2017/10/rospa-the-royal-society-for-the-preservations-of-accidents.png

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

pactflow/actions/can-i-deploy

GitHub Actions to perform common Pact & Pactflow commands

3/10

Maintained action available

leftrightleft/smart-scan

0/10

gittools/cicd/image

Common GitHub action that can be re-used across GitTools repositories

5/10

Maintained action available

azure/trusted-signing-action

9/10

ruby/setup-ruby-pkgs

Cross platform action for Ruby CI

2/10

step-security/git-restore-mtime-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Workflow Action which restores timestamps of files in the current tree. Secure drop-in replacement for chetan/git-restore-mtime-action.

10/10

jaywcjlove/github-action-folder-tree

View the folder directory tree structure, similar to the output of the tree command

3/10

contrast-security-oss/contrast-local-scan-action

Contrast Local Scanner Github action

3/10

bolshakov/ruby/.github/actions/setup/public-layout.tsx

The Ruby Programming Language

3/10

yonasbsd/vector/.github/actions/setup

A high-performance observability data pipeline.

5/10

Maintained action available