Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

ministryofjustice/laa-crime-equinity-historical-data/.github/actions/build-app-gradle

Provide view access to historical data from Equinity

7/10

coveord/spinnaker/.github/actions/publish-halconfig

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

sonarsource/gh-action-lt-backlog/pullrequestclosed

Automate GitHub backlog and Kanbans

6/10

comfy-org/publish-node-action

A Github Action for Publishing Custom Node Version to the Registry

5/10

geomais/sql-guardian

0/10

delaguardo/setup-graalvm

3/10

step-security/readmeio-rdme

ReadMe's official command-line interface (CLI) and GitHub Action 🌊. Secure drop-in replacement for readmeio/rdme.

10/10

Maintained by StepSecurity

step-security/protobuf-ci/checkout

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

nosense588/spring-boot/send-notification/.github/actions/fill

Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.

2/10

dflook/terraform-apply

GitHub action to apply terraform plans

2/10

openzeppelin/moonbeam/.github/workflow-templates/dev-tests

An Ethereum-compatible smart contract parachain on Polkadot

2/10

sonarsource/sonar-packaging-maven-plugin/.actions/config-maven

:package: Maven plugin for building SonarQube Server plugins

5/10

step-security/sbom-action/__builder_checkout_dir__/.github/actions/fill

GitHub Action for creating software bill of materials using Syft. Secure drop-in replacement for anchore/sbom-action.

10/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/version_history

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10

step-integration-tests/auto-pdpr-test-20996-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-57427-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

jfrog/.github/actions/install-go-with-cache

4/10

zedthree/clang-tidy-review/post

Create a pull request review based on clang-tidy warnings

4/10

ministryofjustice/cloud-platform-iam-policy-github-action

A GitHub Action used with Pull requests (PRs) on the MoJ Cloud Platform.

6/10

guyarb/golang-test-annotations

A github action which annotates failed tests.

3/10