Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
fsouza/fake-gcs-action
GitHub Action for running fake-gcs-server in a dettached container in background.
harmon758/postgresql-action
GitHub Action to setup a PostgreSQL database
mfem/github-actions/build-metis
One repo for all mfem GitHub Actions
sasobadovinac/gitnexus/.github/actions/setup-gitnexus-web
GitNexus: The Zero-Server Code Intelligence Engine - GitNexus is a client-side knowledge graph creator that runs entirely in your browser. Drop in a GitHub repo or ZIP file, and get an interactive knowledge graph wit a built in Graph RAG Agent. Perfect for code exploration
warpbuilds/docker-configure
Sets up WarpBuild's Remote Docker Builders in workflows
step-security/github-action-get-latest-release/__builder_checkout_dir__/.github/actions/public-layout.tsx
A Github action to get the latest release from another repository. Secure drop-in replacement for pozetroninc/github-action-get-latest-release.
step-security/setup-buildx-action/_next/static/chunks/59146-5ad79f2f6400fda1.js
GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.
espressif/github-actions/upload_components
Github Actions developed/used by Espressif
mathieusoysal/file-updater-for-release
Update automatically the old version in your readme (or other files) with your new tag version.
step-security/action-setup/__builder_checkout_dir__/.github/actions/secure-download-artifact
Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.
necojackarc/auto-request-review
A GitHub Action that automatically requests review of a pull request based on files changes and/or groups the author belongs to ๐ค
pytorch/test-infra/.github/actions/upload-artifact-s3
This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.
axios/bundle-size
GitHub Action for comparing built artifact gzip bundle sizes against npm release baselines, with JSON reports and optional PR comments.
step-security/setup-buildx-action/_next/static/chunks/app/layout-36884a1483c21d48.js
GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.
coursier/cache-action
GitHub action to save / restore the coursier cache of your build
prefix-dev/setup-pixi
GitHub Action to set up pixi :octocat: ๐ฆ
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins/tiny-carousel-horizontal-slider-plus/inc
This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.
suzuki-shunsuke/github-action-opa-fmt
GitHub Actions to run `opa fmt`
optum/sourcehawk/.github/actions/fill
Sourcehawk is an extensible compliance as code tool which allows development teams to run compliance scans on their source code.
metamask/github-tools/.github/actions/check-changelog
An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews