Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/ghaction-upx
GitHub Action for UPX, the Ultimate Packer for eXecutables. Secure drop-in replacement for crazy-max/ghaction-upx.
sgammon/copybara-action
Runs https://github.com/google/copybara in GitHub Actions. Copybara transforms and moves code between repositories.
smartcontractkit/.github/.github/actions/build-chainlink-image
reusable GHA workflows and actions
taiki-e/create-gh-release-action
GitHub Action for creating GitHub Releases based on changelog.
step-security/release-please-action-oss/__builder_checkout_dir__/.github/actions/privacy-check
Automated releases based on conventional commits. Secure drop-in replacement for release-please-oss/release-please-action.
sonarsource/release-github-actions/public-layout.tsx
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.
envoyproxy/toolshed/actions/docker/fill
redpanda-data/llvm-project/workflows-main/.github/workflows/release-binaries-setup-stage
The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.
elastic/apm-queue/.github/actions/system-test
Abstraction layer over Kafka / GCP PubSub Lite to produce and consume records
ozi-project/secure-release
OZI secure release workflow
slsa-framework/slsa-github-generator/.github/actions/generate-attestations
Language-agnostic SLSA provenance generation for Github Actions
launchdarkly/erlang-server-sdk/.github/actions/fill
LaunchDarkly Server-Side SDK for Erlang/Elixir
akladiev/labeler
An action for automatically labelling pull requests
louy/maintain-one-pull-request
Github Action for maintaining a single pull request for a set of given head/base branches
allenai/setup-beaker
Set up your GitHub Actions workflow with the Beaker command-line client
nodoubtz-record-label/pipelines/.github/actions/deploy
Machine Learning Pipelines for Kubeflow
ministryofjustice/opg-data-deputy-reporting/_ghsemveraction/.github/actions/branch-name
Deputy reporting integration with OPG Data: Managed by opg-org-infra & Terraform
kneemaa/github-action-rotate-aws-secrets
Github Action to rotate AWS Access Keys stored in a repositories secrets
flatherskevin/semver-action
Bump current semantic version based on Git tagging
coveo/ui-kit/.github/actions/cypress-atomic-screenshots
Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.