Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

philips-labs/slsa-provenance-action

Github Action implementation of SLSA Provenance Generation

5/10

Maintained action available

chainguard-dev/actions/setup-mirror

A collection of reusable Github Actions workflows.

8/10

rwx-research/setup-captain

GitHub action for using Captain

5/10

grafana/writers-toolkit/update-make-docs

Technical documentation guidelines for Grafana Labs documentation

7/10

sredevopsorg/cilium/.github/actions/set-env-variables

eBPF-based Networking, Security, and Observability

3/10

tachiyomiorg/issue-moderator-action

GitHub action for organization members to use commands for moderating issues of a repository.

1/10

markdown-confluence/publish-action

GitHub Action wrapping up @markdown-confluence/cli (Docker version)

4/10

Vendic/magento2-regenurlkeys/.github/actions/setup

Magento 2 - Regenerate missing product url keys

3/10

actionsdesk/semver

3/10

neondatabase/dev-actions/docker-registry-login

6/10

dotnet/docs-actions/actions/docs-verifier

This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.

4/10

Maintained action available

samuelmeuli/action-maven-publish

📦 GitHub Action for automatically publishing Maven packages

1/10

$infracost/actions$

infracost/actions

GitHub Action for Infracost. See cloud cost estimates for Terraform in pull requests. 💰📉 Love your cloud bill!

4/10

buildless/setup

Github Action for lightning-fast build caching with Buildless

4/10

pmeier/pytest-results-action

Summarize pytest test results in GitHub Actions

4/10

matrix-org/done-action

A Github Action which suceeds only if all the dependent jobs succeeded

5/10

step-security/publish-unit-test-result-action/windows/bash

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

10/10

Maintained by StepSecurity

vladopajic/go-test-coverage/action/source

go-test-coverage is a tool designed to report issues when test coverage falls below a specified threshold

4/10

Maintained action available

doyensec/electronegativity-action

The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

2/10

yonasBSD/bearer/.github/actions/linux-build

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

4/10

Maintained action available