Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

pytorch/tensordict/test-infra/.github/actions/setup-ssh

TensorDict is a pytorch dedicated tensor container.

4/10

Maintained action available

paladini/harness-score/image

Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.

4/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_prepare_results

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10

dsaltares/fetch-gh-release-asset

Github Action to download an asset from a Github release

3/10

politicalsphere/ci/.github/actions/ps-ci-validate

CI/CD pipelines and GitHub Actions for Political Sphere

2/10

pytorch/text/test-infra/.github/actions/setup-binary-builds

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10

step-security/runs-on-action

The official RunsOn action. Secure drop-in replacement for runs-on/action.

10/10

zendesk/setup-jsonnet

3/10

slsa-framework/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-go

Language-agnostic SLSA provenance generation for Github Actions

4/10

step-security/delete-deployment-environment

GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.

8/10

Maintained by StepSecurity

step-security/change-string-case-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.

10/10

step-security/tag-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github action to copy/retag multiarch images from one registry to another. Secure drop-in replacement for akhilerm/tag-push-action.

10/10

step-integration-tests/auto-pdpr-test-87792-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

open-edge-platform/geti-ci/actions/semgrep

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

surrealdb/rocksdb/.github/actions/build-folly

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

lukka/run-cmake

GitHub Action to build C++ applications with CMake (CMakePresets.json), Ninja and vcpkg on GitHub.

4/10

erlef/setup-elixir

Set up your BEAM-based GitHub Actions workflow (Erlang, Elixir, Gleam, ...)

7/10

ministryofjustice/payforlegalaid/.github/build-and-test

8/10

prometheus/promci-images/publish_release

GitHub Actions for handling container images.

6/10

itchyny/s3-cache-action

GitHub Action to save cache files and restore them from Amazon S3

3/10

Maintained action available