Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nodoubtz-record-label/cdp-sdk/.github/actions/fetch-docs-artifact

Client libraries for managing EVM and Solana wallets while relying on CDP to secure private keys.

4/10

chainguard-dev/melange/.github/actions/setup-bubblewrap

build APKs from source code

7/10

coveo/semantic-monorepo-tools/.github/actions/public-layout.tsx

A library of helper functions to do SemVer2 compliant releases from Conventional Commits in monorepos

5/10

crytic/echidna-action

GitHub Action to run Echidna, the Ethereum smart contract fuzzer

4/10

enricomi/publish-unit-test-result-action/misc/action/json-output

GitHub Action to publish unit test results on GitHub

4/10

Maintained action available

nvidia/nemo-relay/source-checkout/.github/actions/load-ci-tool-versions

Multi-language agent runtime for execution scope management, lifecycle events, and middleware on tool and LLM calls.

5/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/docker-bake-action

Mirror from https://github.com/docker/bake-action

2/10

Maintained action available

backstage/actions/renovate-changesets

Custom actions for automating Backstage workflows

3/10

yonasbsd/loki/actions/backport

Like Prometheus, but for logs.

2/10

Maintained action available

nvidia-nemo/megatron-bridge/fw-ci-templates/.github/actions/publish-docs

Training library for Megatron-based models with bidirectional Hugging Face conversion capability

7/10

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/fill

Github actions for HMPPS projects

6/10

openai/gabriel/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

An official OpenAI toolkit for social scientists and data scientists to measure quantitative attributes in text, images, or audio using the GPT API.

5/10

Maintained action available

orcid-dev/orcid_dev-source-cache-action

2/10

jun3453/slack-pr-open-notification-action

Use github actions to notify slack that a pull request has been opened.

2/10

sonarsource/sonar-classloader/.actions/get-build-number

Toolbox for Java classloaders

6/10

step-security/action-download-artifact/__builder_checkout_dir__/.github/actions/secure-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

10/10

slidoapp/xcresulttool

A GitHub Action that generates a human-readable test report from the Xcode result bundle and shows it on GitHub Checks.

6/10

politicalsphere/ci/.github/actions/jscpd

CI/CD pipelines and GitHub Actions for Political Sphere

2/10

launchdarkly/go-server-sdk-redis-redigo/.github/actions/coverage

Redis integration for the LaunchDarkly SDK for Server-side Go (with Redigo client)

5/10

Maintained action available

kafkasl/delete_from_another_repo

Github action to delete path from another repository

3/10