Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

tanker187/cdp-sdk/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Client libraries for managing EVM and Solana wallets while relying on CDP to secure private keys.

4/10

cloudkernels/minio-upload

A GitHub action that allows you to upload artifacts to a MinIO server

2/10

step-security/action-actionlint/__builder_checkout_dir__/.github/actions/privacy-check

run actionlint with reviewdog. Secure drop-in replacement for reviewdog/action-actionlint.

10/10

rohansingh/paths-filter

Conditionally run actions based on files modified by PR, feature branch or pushed commits

2/10

fortify/github-action/sc-sast-scan

Fortify GitHub Actions

2/10

Maintained action available

recidiviz/pulse-data/.github/actions/python-setup

A data platform for criminal justice analysis and product development [public mirror]

5/10

Maintained action available

envoyproxy/toolshed/actions/jq

6/10

firestoned/github-actions/security/license-check

4/10

check-spelling/check-spelling/../check-spelling-actions/checkout-merge

Spelling checker action to check spelling in repositories / pull requests / commits

5/10

actions-security-demo/pytorch/.github/actions/setup-xpu

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

cookieai-jar/teleport/.github/actions/difftest

The easiest, and most secure way to access and protect all of your infrastructure.

4/10

Maintained action available

navikt/digestabot

A Github Action to automatically update digests for container images.

6/10

approved-3rd-party-actions/k6-action

k6 is now available as a GitHub Action

3/10

step-security/push-to-gcr-github-action/__builder_checkout_dir__/.github/actions/privacy-check

An action that build docker image and push to Google Cloud Registry and Google Artifact Registry. Secure drop-in replacement for RafikFarhad/push-to-gcr-github-action.

10/10

hecrj/setup-rust-action

Set up a specific Rust toolchain in your GitHub workflows

5/10

sonarsource/sonarqube-scan-action/install-build-wrapper

4/10

product-os/setup-skopeo-action

Setup skopeo in a GitHub Actions workflow

5/10

Maintained action available

pytorch/test-infra/.github/actions/upload-benchmark-results

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

weseek/ghaction-slack-notification

Slack Notification for GitHub Actions :bell:

2/10

rapidsai/shared-actions/shared-actions/telemetry-impls/stash-base-env-vars

6/10