Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

home-assistant/builder/actions/image

Home Assistant builder script

7/10

hashicorp/tfc-workflows-github/actions/image

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

6/10

aerospike/aerospike-client-nodejs/.github/actions/setup-docker-on-macos

Node.js client for the Aerospike database

5/10

Maintained action available

statsig-io/statsig-publish-sdk-action/ruby

1/10

Maintained action available

grafana/plugin-ci-workflows/actions/internal/check-matrix-status

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

aquasecurity/setup-trivy

Set up your GitHub Actions workflow with a specific version of Trivy

5/10

open-telemetry/opentelemetry-ebpf-profiler/.github/workflows/env

The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

8/10

yonasbsd/juicefs/.github/actions/upload-total-coverage

JuiceFS is a distributed POSIX file system built on top of Redis and S3.

3/10

Maintained action available

deadsnakes/action

a GitHub action to install (pre-release) pythons from deadsnakes

4/10

Maintained action available

dustin4444/developer.konghq.com/.github/reusable-steps/run-site

🦍 Source code for developer.konghq.com website.

5/10

Maintained action available

dessant/support-requests

GitHub Action that comments on and closes issues labeled as support requests

4/10

Maintained action available

mongodb-js/devtools-shared/actions/setup-bot-token

Shared dependencies of Compass, the MongoDB extension for VSCode and mongosh

3/10

Maintained action available

step-integration-tests/auto-pdpr-test-06314-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/setup-allurectl

Set up your GitHub Actions workflow with a specific version of allurectl. Secure drop-in replacement for allure-framework/setup-allurectl.

10/10

s4u/setup-maven-action

Complete environment configuration for Maven builds

7/10

ambilykk/copilot-usage-report

Export the Copilot for Business seat assignments for an organization that are currently being billed

2/10

modeseven-lfreleng-actions/http-api-tool-docker

Tests an HTTP/HTTPS API service/endpoint

7/10

step-security/get-secretmanager-secrets/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action for accessing secrets from Google Secret Manager and making them available as outputs. Secure drop-in replacement for google-github-actions/get-secretmanager-secrets.

10/10

step-security/read-file-action/__builder_checkout_dir__/.github/actions/privacy-check

Read file contents. Secure drop-in replacement for juliangruber/read-file-action.

8/10

orcid/shellkit-action

github action to install bash tools onto a github runner into /opt/shellkit

2/10