Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

julia-actions/setup-julia

This action sets up a Julia environment for use in actions by downloading a specified version of Julia and adding it to PATH.

7/10

MetaMask/github-tools/.github/actions/flaky-test-report

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

4/10

Maintained action available

pytorch/ao/test-infra/.github/actions/setup-nvidia

PyTorch native quantization and sparsity for training and inference

4/10

Maintained action available

tigerwest/slack-approval

Custom action to send approval request to Slack

1/10

hashicorp/terraform-github-actions/apply

Terraform GitHub Actions

5/10

qbaware/nilaway-action

A GitHub Action that analyses Golang codebases for potential Nil panics, based on Uber's nilaway

6/10

pytorch/rl/test-infra/.github/actions/chown-directory

A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.

3/10

Maintained action available

LedgerHQ/ledger-live/tools/actions/composites/setup-build-desktop

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

actions-security-demo/pytorch/pytorch/.github/actions/filter-test-configs

Tensors and Dynamic neural networks in Python with strong GPU acceleration

3/10

simenandre/setup-gke-gcloud-auth-plugin

Installs a pre-requisite for "gcloud container clusters get-credentials" command with a modern k8s client.

3/10

grafana/nethax/_shared-workflows-dockerhub-login/actions/get-vault-secrets

A Kubernetes network toolkit for engineers.

8/10

guibranco/github-status-action-v2

🏃 :octocat: GitHub action to update status check of a pull request

7/10

hexionas/grafana-annotation-action

GitHub Action for Grafana annotations.

1/10

broadsage/docs/.github/actions/node-prepare

The Broadsage Official Documentation Website

0/10

grafana/oncall/.github/actions/set-engine-version-in-settings

Developer-friendly incident response with brilliant Slack integration

6/10

sbe-arg/simple-tags-and-releases

A simple tag and release ACTION for your repositories.

6/10

whoan/docker-build-with-cache-action

:octocat: Build and push docker images caching each stage to reduce build time

6/10

stefreak/ossf-scorecard-repro-2189/.github/actions/reproduce-composite

Reproduce bug https://github.com/ossf/scorecard/issues/2189

2/10

android-actions/setup-android

Android SDK setup for GitHub Actions

4/10

docker/buildx

Docker CLI plugin for extended build capabilities with BuildKit

10/10