Assess the risk of third-party GitHub Actions

pytorch/executorch/test-infra/.github/actions/setup-binary-upload

On-device AI across mobile, embedded and edge for PyTorch

dieghernan/cff-validator

Validate your CITATION.cff file with GitHub Actions

4/10

step-security/actions-oidc-debugger

An Action for printing OIDC claims in GitHub Actions. Secure drop-in replacement for github/actions-oidc-debugger.

Maintained by StepSecurity

yonasBSD/buck2/.github/actions/CONTRIBUTING.md

Build system, successor to Buck

3/10

envoyproxy/toolshed/actions/envoy/ci/env

7/10

ortega2247/pypi-upload-action

Github action to upload a python package to PyPI

step-security/docs-as-code-confluence/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Publish the content of a folder to confluence Github Action. Secure drop-in replacement for Bhacaz/docs-as-code-confluence.

yonasBSD/posthog/.github/actions/get-pr-labels

🦔 PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.

google/clusterfuzzlite/actions/build_fuzzers

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

4/10

advanced-security/filter-sarif

GitHub Action for filtering Code Scanning alerts by path and id

6/10

php/setup-php-sdk

Setup Windows build environment for PHP extensions

4/10

yonasBSD/rustic-docs/.github/workflows/install-mdbook

rustic user documentation

3/10

itsmechlark/opennextjs-cloudflare/.github/actions/install-dependencies

Open Next.js adapter for Cloudflare

elastic/apm-server/.github/workflows/smoke-test-ess-action

6/10

step-security/action-tflint/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Run tflint with reviewdog on pull requests to enforce best practices. Secure drop-in replacement for reviewdog/action-tflint.

timonmasberg/nx-migration-gh-action

Automatically applies migrations, updates dependencies and opens a PR on new versions of NX

3/10

yonasBSD/git-cliff/.github/actions/run-fixtures-test

A highly customizable Changelog Generator that follows Conventional Commit specifications ⛰️

5/10

step-security/upload-release-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Upload files to a GitHub release. Secure drop-in replacement for svenstaro/upload-release-action.