Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

yonasbsd/mimir/actions/public-layout.tsx

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

3/10

Maintained action available

step-security/action-semantic-demo/.github/actions/build-dist

7/10

step-security/repo-sync-pull-request/__builder_checkout_dir__/.github/actions/privacy-check

⤵️ A GitHub Action for creating pull requests. Secure drop-in replacement for repo-sync/pull-request.

10/10

ariga/setup-atlas

A GitHub Action to install ariga/atlas in your workflows.

3/10

optum/booster/.github/actions/test-integration-run-one

Booster Cloud Framework

3/10

step-security/gajira-create

Secure drop-in replacement for atlassian/gajira-create.

9/10

Maintained by StepSecurity

tj-actions/changed

:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.

6/10

manovotny/github-releases-for-automated-package-publishing-action

GitHub Action to validate and extract GitHub release information, used for automated package publishing.

2/10

yonasbsd/dolt/.github/actions/orm-tests

Dolt – Git for Data

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-65717-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nicholas-fedor/shoutrrr/.github/actions/govulncheck

A notification library for gophers and their furry friends.

7/10

bazelbuild/continuous-integration/actions/fill

Bazel's Continuous Integration Setup

6/10

action-pack/set-variable

Action to set a repository variable.

5/10

Maintained action available

aave-dao/action-forge-sizes

Action reporting on forge sizes changes

0/10

tsukimarf/download-artifact

3/10

step-security/ticket-link-appender/__builder_checkout_dir__/.github/actions/privacy-check

Appends jira or other project board ticket link to description. Secure drop-in replacement for sbimochan/ticket-link-appender.

10/10

openzeppelin/openzeppelin-relayer-sdk/.github/actions/prepare

OpenZeppelin Relayer SDK

4/10

idanho/comment-on-pr

A GitHub Action to comment on the relevant open PR when a commit is pushed.

3/10

signpath/github-action-submit-signing-request

4/10

Maintained action available

nvidia/megatron-lm/.github/image

Ongoing research training transformer models at scale

4/10

Maintained action available