Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

meteorcloudy/continuous-integration/actions/bcr-pr-review-notifier

Bazel's Continuous Integration Setup

3/10

step-security/cucumber-report-annotations-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

A GitHub action to publish cucumber report on pull request annotations. Secure drop-in replacement for deblockt/cucumber-report-annotations-action.

10/10

akhilerm/tag-push-action

Github action to copy/retag multiarch images from one registry to another

3/10

pytorch/test-infra/test-infra/.github/actions/check-disk-space

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

4/10

Maintained action available

exions/merge-upstream

⤵️ Merge in changes from upstream. Useful for syncing upstream changes to fork.

3/10

actions-ecosystem/action-size

📏 GitHub Action to determine a label to be added based on PR's size

2/10

gdcorp-action-public-forks/super-linter

Combination of multiple linters to install as a GitHub Action

4/10

step-security/github-api-commit-action

Commits changes to the repository through the Github api instead of traditional git commands. Secure drop-in replacement for grafana/github-api-commit-action.

10/10

Maintained by StepSecurity