Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

deriv-com/shared-actions/.github/actions/post_preview_link_comment

This repository is dedicated to hosting reusable GitHub Actions YAML files that can be shared across different repositories.

4/10

Maintained action available

chainguard-dev/actions/setup-terraform-docs

A collection of reusable Github Actions workflows.

8/10

sigoden/install-binary

GitHub Action to install a binary from a GitHub Release

2/10

lfreleng-actions/python-sbom-action

Generates an SBOM for Python projects

4/10

Maintained action available

caffeelake/kestra/actions/.github/actions/setup-build

:zap: Universal Workflow Orchestration Platform — Code in any language, run anywhere. 800+ plugins for data, infrastructure, and AI automation.

3/10

mridang/action-semantic-release

Automates semantic-release on GitHub pushes, including plugin management and optional status check waiting

2/10

openzeppelin/compact-tools/.github/actions/setup

A monorepo for collecting all the shared Compact tools

6/10

elastic/apm-agent-dotnet/.github/workflows/bootstrap

8/10

edera-dev/cross/.github/actions/setup-rust

“Zero setup” cross compilation and “cross testing” of Rust crates

3/10

ionos-deploy-now/artifact-action

1/10

neondatabase/neon/.github/actions/download

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

3/10

ministryofjustice/hmpps-probation-integration-services/.github/actions/dependabot-automerge

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

spenserblack/actions-wiki

:open_book: Deploy docs from your source tree to a GitHub wiki

2/10

ministryofjustice/hmpps-github-actions/.github/actions/slack_codescan_notification

Github actions for HMPPS projects

6/10

approved-3rd-party-actions/mage-action

GitHub Action for Mage

2/10

grafana/promql-builder/.github/actions/setup-cog

Set of libraries for writing and composing PromQL queries as-code in several languages.

4/10

semoal/action-netlify-deploy

🙌 Netlify deployments via GitHub actions

2/10

sangonzal/repository-traffic-action

GitHub action to save GitHub repository insights past the default 2 week period

2/10

jupyter-server/jupyter_releaser/.github/actions/prep-release

A set of helper scripts and GitHub Actions to aid in automated releases of Python and npm packages.

6/10

nvidia/aicr/.github/actions/ghcr-login

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10