Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia/tilus/.github/actions/install-tilus

Tilus is a tile-level kernel programming language with explicit control over shared memory and registers.

6/10

jupyterlab/maintainer-tools/.github/actions/downstream-test

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

7/10

bakunyo/git-pr-release-action

2/10

miraai/read-helm-chart-yaml

Read Chart.yaml file from Helm Charts

3/10

projectdiscovery/actions/pr/merge

ProjectDiscovery's Composite Actions

5/10

aerospike/aerospike-client-python/.github/actions/wait-for-ce-server-to-start

Aerospike Python Client

4/10

Maintained action available

codecov/basic-test-results

GitHub Actions to collect test results and emit a PR comment about the test status.

6/10

yonasbsd/neon/.github/actions/run-python-test-set

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

2/10

yonasbsd/authentik/.github/actions/comment-pr-instructions

The authentication glue you need.

4/10

Maintained action available

nvidia-nemo/automodel/.github/actions/test-template

Pytorch Distributed native training library for LLMs/VLMs with OOTB Hugging Face support

7/10

fish-shop/install-plugin

A GitHub action for installing fish shell plugins.

8/10

atomicjar/testcontainers-cloud-setup-action

Github Cloud Action to Download and Configure Testcontainers Cloud Agent

4/10

nvidia/cuda-quantum/.github/actions/setup-precommit

C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows

8/10

ben-manes/caffeine/../check-spelling-actions/upload-artifact

A high performance caching library for Java

8/10

nv-legate/legate/.github/actions/telemetry-install-reqs

The Foundation for All Legate Libraries

6/10

beeb/lintspec

A blazingly fast linter for NatSpec comments in Solidity code

5/10

Maintained action available

mariomac/linked-release-notes

3/10

step-security/setup-trivy

Set up your GitHub Actions workflow with a specific version of Trivy. Secure drop-in replacement for aquasecurity/setup-trivy.

10/10

Maintained by StepSecurity

stainless-api/upload-openapi-spec-action/preview

A GitHub action to build Stainless SDKs.

3/10

Maintained action available

grafana/cloudcost-exporter/.github/actions/setup-goversion

Prometheus Exporter for Cloud Provider cost metrics

8/10