Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

caffeelake/serenity/.github/actions/setup

The Serenity Operating System 🐞

6/10

step-security/github-create-release-action/__builder_checkout_dir__/.github/actions/privacy-check

Create a GitHub release from a Tag. Secure drop-in replacement for Roang-zero1/github-create-release-action.

10/10

vexxhost/chart-vendor/image

Tool for vendoring Helm charts into a Git repository

3/10

Maintained action available

mercurytechnologies/delete-cancelled-runs

Deletes cancelled runs for a given workflow

3/10

slsa-framework/source-actions/slsa_with_provenance

Source tool actions (fallback)

3/10

pytorch/multipy/test-infra/.github/actions/pull-docker-image

torch::deploy (multipy for non-torch uses) is a system that lets you get around the GIL problem by running multiple Python interpreters in a single C++ process.

1/10

pavelzw/pytest-action

:octocat: GitHub Action to run pytest with GitHub Job Summaries support :snake: :rocket:

5/10

yonasbsd/mask/.github/actions/attach-release-assets

🎭 A CLI task runner defined by a simple markdown file

2/10

rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem_ci_per_commit

Rstack Ecosystem CI

4/10

Maintained action available

imjasonh/gke-auth

K8s cred helper and setup without gcloud

3/10

Maintained action available

ministryofjustice/laa-court-data-ui/.github/actions/delete-dev-release

"View court data" webapp for viewing data from HMCTS's "Common Platform"

8/10

chainguard-dev/actions/donotsubmit

A collection of reusable Github Actions workflows.

6/10

step-security/setup-qemu-action/_next/static/chunks/21618-769ae870d42e6ba8.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

8/10

magicproduct/packer-plugin-googlecompute/integration-release-action

Packer plugin for Google Compute Builder

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-74755-6/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

pytooling/actions/releaser

Reusable steps and workflows for GitHub Actions

3/10

Maintained action available

appimagecrafters/build-appimage

GitHub Action for producing AppImages

3/10

step-security/github-action-benchmark

GitHub Action for continuous benchmarking to keep performance. Secure drop-in replacement for benchmark-action/github-action-benchmark.

9/10

Maintained by StepSecurity

confidential-containers/guest-components/.github/actions/install-nvat-sdk

Confidential Containers Guest Tools and Components

6/10

step-security/docs-as-code-confluence/__builder_checkout_dir__/.github/actions/secure-download-artifact

Publish the content of a folder to confluence Github Action. Secure drop-in replacement for Bhacaz/docs-as-code-confluence.

10/10