Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

rickstaa/action-create-tag

Simple GitHub action that can be used to create a tag inside a GitHub action.

5/10

aslafy-z/conventional-pr-title-action

Ensure your PR title matches the Conventional Commits spec.

4/10

yonasbsd/affine/.github/actions/build-rust

There can be more than Notion and Miro. AFFiNE is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

4/10

Maintained action available

grafana/mqtt-datasource/actions/commands

MQTT Datasource for Grafana allows streaming data from any MQTT broker running either locally or remotely.

6/10

k0-rr/freecodecamp/tools/crowdin/actions/remove-deleted-files

freeCodeCamp.org's open source codebase and curriculum. Learn to code for free.

3/10

cyclonedx/gh-gomod-generate-sbom

GitHub action to generate a CycloneDX SBOM for Go modules

5/10

smartcontractkit/.github/actions/parse-and-mask-test-secrets

reusable GHA workflows and actions

5/10

Maintained action available

flcdrg/replace-multiple-action

GitHub Action to replace multiple strings in files

4/10

Maintained action available

jupyterlab/maintainer-tools/.github/actions/base-setup

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

8/10

step-security/deployment-status/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action to create a deployment status update. Secure drop-in replacement for chrnorm/deployment-status.

9/10

hashicorp/actions-docker-build

Docker Build Action for CRT

5/10

0xsequence/actions/git-commit

Common Github Actions

4/10

espressif/sync-jira-actions

GitHub Actions for syncing the project with the Espressif Jira system

5/10

Maintained action available

fish-shop/run-fishtape-tests

A GitHub action for running Fishtape tests.

8/10

kachick/wait-other-jobs

☕ Wait for jobs, even across workflows

5/10

Maintained action available

step-security/run-vcpkg/__builder_checkout_dir__/.github/actions/privacy-check

The GitHub Action to setup vcpkg for your C++ based projects. Stores built ports using Binary Caching backed onto GH Cache. Secure drop-in replacement for lukka/run-vcpkg.

8/10

andraghetti/coverage

GitHub Action for python coverage publish & analysis

2/10

grafana/k6-action

[Archived] Legacy k6 GitHub Action

6/10

wparr-circle/terraform-cloud-provider-publish

An action for publishing terraform providers to a private registry

2/10

aerospike/aerospike-client-nodejs/.github/actions/wait-for-as-server-to-start

Node.js client for the Aerospike database

3/10