Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

flcdrg/replace-multiple-action

GitHub Action to replace multiple strings in files

4/10

Maintained action available

jupyterlab/maintainer-tools/.github/actions/base-setup

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

8/10

step-security/deployment-status/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action to create a deployment status update. Secure drop-in replacement for chrnorm/deployment-status.

9/10

hashicorp/actions-docker-build

Docker Build Action for CRT

5/10

0xsequence/actions/git-commit

Common Github Actions

4/10

espressif/sync-jira-actions

GitHub Actions for syncing the project with the Espressif Jira system

5/10

Maintained action available

fish-shop/run-fishtape-tests

A GitHub action for running Fishtape tests.

8/10

kachick/wait-other-jobs

☕ Wait for jobs, even across workflows

5/10

Maintained action available

step-security/run-vcpkg/__builder_checkout_dir__/.github/actions/privacy-check

The GitHub Action to setup vcpkg for your C++ based projects. Stores built ports using Binary Caching backed onto GH Cache. Secure drop-in replacement for lukka/run-vcpkg.

8/10

andraghetti/coverage

GitHub Action for python coverage publish & analysis

2/10

grafana/k6-action

[Archived] Legacy k6 GitHub Action

6/10

wparr-circle/terraform-cloud-provider-publish

An action for publishing terraform providers to a private registry

2/10

aerospike/aerospike-client-nodejs/.github/actions/wait-for-as-server-to-start

Node.js client for the Aerospike database

3/10

milhy545/coder/.github/actions/embedded-pg-cache/docs/images/banner-black.png

Secure environments for developers and their agents

2/10

brokenpip3/action-pre-commit-update

Github actions that will automatically update your pre-commit hooks

4/10

formbricks/formbricks/.github/actions/dangerous-git-checkout

Open Source Qualtrics Alternative

4/10

Maintained action available

politicalsphere/ci/.github/actions/lint

CI/CD pipelines and GitHub Actions for Political Sphere

3/10

Maintained action available

spring-io/central-publish-action

7/10

rahrahlife/ec2-github-runner

On-demand self-hosted AWS EC2 runner for GitHub Actions

2/10

grafana/community-contributions/actions/has-matching-release-tag

External contributor PR workflow testing sandbox

2/10