Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/public-layout.tsx
Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)
mellanox/k8snetworkplumbingwg-plugins/.github/actions/retest-action
Some reference and example networking plugins, maintained by the CNI team.
open-edge-platform/geti-ci/actions/collect-sbom-library
A public-facing, centralized place to store reusable workflows and actions used by Geti projects.
ory/ci/newsletter
Automation and robots for Ory's CI and CD pipelines
grafana/writers-toolkit/.github/actions/website-sync
Technical documentation guidelines for Grafana Labs documentation
ocular-d/json-linter
GitHub Action
tj-actions/coverage-badge-py
:octocat: Github action to generate coverage badge without uploading results to a 3rd party.
qoomon/actions--create-commit
GitHub Action to create signed commits from within a GitHub Action workflow
sasobadovinac/palace/.github/actions/public-layout.tsx
3D finite element solver for computational electromagnetics
dustin4444/desktop/.github/actions/public-layout.tsx
Focus on what matters instead of fighting with Git.
lancemccarthy/code-sign-action
Action that signs libraries with a code signing certificate.
epam/ai-dial-ci/actions/public-layout.tsx
Continuous Integration instrumentation for AI DIAL components
david-a-wheeler/flawfinder
a static analysis tool for finding vulnerabilities in C/C++ source code
mathieusoysal/javadoc-publisher.yml
Generate Javadoc from your maven/gradle project and deploy it with GitHub Page.
dotnet/docs-tools/actions/fill
This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.
sonarsource/sonar-flex/.actions/image
useblacksmith/setup-docker-builder
phpstan/phpstan-doctrine/build-infection/.github/actions/setup-php
Doctrine extensions for PHPStan
nvidia/nemo-relay/.github/actions/load-ci-tool-versions
Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.
onebrief/gotenberg/.github/actions/build-test-push
A Docker-powered stateless API for PDF files.