Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mgrybyk-org/allure-report-branch-js-action

Allure Report with history per branch (JS)

3/10

github/lock

Lock Action to support deployment locking for the branch-deploy Action

5/10

rfratto/depcheck

Github Action to create issues for outdated Go deps

2/10

apache/logging-log4j2

Apache Log4j is a versatile, feature-rich, efficient logging API and backend for Java.

8/10

jofthev/workers-sdk/.github/actions/install-dependencies

⛅️ Home to Wrangler, the CLI for Cloudflare Workers®

3/10

anithapriyanatarajan/plumbing/.github/actions/setup-nightly-infra

This repo holds configuration for infrastructure used across the tektoncd org 🏗️

4/10

Maintained action available

pandoc/actions/setup

4/10

matt-ball/newman-action

Use Postman's headless collection runner, Newman, via a GitHub Action.

3/10

bcr-testing/continuous-integration/actions/bcr-pr-reviewer

Bazel's Continuous Integration Setup

3/10

pytorch/pytorch.github.io/test-infra/.github/actions/pull-docker-image

The website for PyTorch

3/10

gaurav-nelson/github-action-markdown-link-check

⛔️ DEPRECATED Check all links in markdown files if they are alive or dead. 🔗✔️PS: https://github.com/tcort/github-action-markdown-link-check

5/10

politicalsphere/ci/.github/actions/ps-task/license-check

CI/CD pipelines and GitHub Actions for Political Sphere

2/10

ben-z/gh-action-mutex

A simple locking/unlocking mechanism to provide mutual exclusion in Github Actions

4/10

popsiclestick/gist-sync-action

Github action to mirror a file into a gist

2/10

step-security/pull-request-comment-trigger

A github action for detecting a "trigger" in a pull request description or comment. Secure drop-in replacement for Khan/pull-request-comment-trigger.

9/10

Maintained by StepSecurity

crossplane-contrib/setup-crossplane-action

GitHub Action to setup the Crossplane binary

4/10

Maintained action available

fortify/gha-export-vulnerabilities

Deprecated; please use https://github.com/marketplace/actions/fortify-ast-scan instead

2/10

mansona/npm-lockfile-version

2/10

elastic/oblt-actions/buildkite/run

8/10

stackadapt/action-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria

2/10