Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

clidey/whodb/.github/actions/public-layout.tsx

A lightweight next-gen data explorer - Postgres, MySQL, SQLite, MongoDB, Redis, MariaDB, Elastic Search, and Clickhouse with Chat interface

4/10

Maintained action available

step-security/action-setup

Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.

9/10

Maintained by StepSecurity

sonots/slack-notice-action

Yet Another GitHub Action to notify slack

2/10

izhangzhihao/delete-comment

delete comments from issue/pr by username

2/10

qltysh/qlty-action/coverage

▶️ Qlty GitHub Action

6/10

rajatjindal/krew-release-bot

bot to bump version of plugin in krew-index on new releases

4/10

caffeelake/cockroach/.github/actions/microbenchmark-build

CockroachDB — the cloud native, distributed SQL database designed for high availability, effortless scale, and control over data placement.

0/10

andreaso/vault-oidc-ssh-cert-action

Action to get short-lived SSH client certificates from Vault alt. OpenBao

6/10

polyseam/setup-cndi

GitHub Action that installs CNDI binary so it can be called in workflows

2/10

timschoenle/actions/tmp/actions-code/actions/common/commit-changes

Centralized collection of reusable GitHub Actions, Workflows, and configurations.

7/10

ministryofjustice/laa-data-access-api/.github/actions/get_release_name

8/10

angular/dev-infra/github-actions/unified-status-check

Angular Development Infrastructure

6/10

jfagoagas/grafana/actions/github-release

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10

devops-actions/issue-comment-tag

Tag a user or a team in an issue comment

7/10

elastic/golang-crossbuild/.github/actions/bump-golang

7/10

git-for-windows/rss-to-issues

create issues from a syndication feed (RSS or Atom).

2/10

Maintained action available

bwoodsend/setup-winlibs-action

Action to quickly setup WinLibs gcc and clang compilers on Github's CI/CD

3/10

raj-organization-1234/cucumber-report-annotations-action

a github action to publish cucumber report on pull request annotations. Secure drop-in replacement for deblockt/cucumber-report-annotations-action.

3/10

grafana/shared-workflows/actions/get-vault-secrets

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

7/10

fortify/github-action/internal/setup-java-for-sc-client

Fortify GitHub Actions

2/10

Maintained action available