Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

cloudposse/github-action-datadog-notify

Github Action for https://github.com/dvmtn/datadog-notify, which sends an event api call to Datadog

6/10

qoomon/actions--context

Access additional job context informations like current job details (log url, environment, ...) and current deployment details.

3/10

Maintained action available

ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/fill

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10

huntridge-labs/argus/.github/actions/fill

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

ihub-pub/bot/publish

IHub自动化工具应用集

8/10

launchdarkly/go-server-sdk/.github/actions/benchmarks

LaunchDarkly Server-side SDK for Go

5/10

Maintained action available

aerospike/aerospike-client-python/.github/actions/update-version

Aerospike Python Client

4/10

step-security/setup-scala

GitHub Action to install any version of Java (GraalVM, Java 8, Java 11, Java 14, ...) via Jabba. Works for any JVM language including Java, Scala and Kotlin. Secure drop-in replacement for olafurpg/setup-scala.

10/10

Maintained by StepSecurity

chronograph-pe/prevent-file-change-action

Fail a pull request workflow if certain files are changed

2/10

step-security/dflook-terraform-fmt-check

GitHub action to check the formatting of terraform files. Secure drop-in replacement for dflook/terraform-fmt-check.

10/10

Maintained by StepSecurity

yonasbsd/oxc/.github/actions/archive-binary

⚓ A collection of JavaScript tools written in Rust.

5/10

Maintained action available

elastic/ecs-logging-java/.github/workflows/fill

7/10

step-security/azure-login/__builder_checkout_dir__/.github/actions/public-layout.tsx

Connect to Azure. Secure drop-in replacement for azure/login.

10/10

ashutoshvarma/action-cmake-build

Github action for cmake based projects

2/10

step-integration-tests/auto-pdpr-test-79603-7/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-06591-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

octodemo-resources/uuidv5-action

Generate UUID v5 ids for namespace and objects in GitHub Actions

3/10

nvidia/onnxruntime/.github/actions/install-onnxruntime-wheel

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10

rasahq/rasa-nlu-eval-compare-gha

A GitHub Action that compares results of multiple Rasa NLU evaluation results and writes the output to an HTML table

0/10

step-security/bobheadxi-deployments/__builder_checkout_dir__/.github/actions/fill

🔖 GitHub Action for working painlessly with deployment statuses. Secure drop-in replacement for bobheadxi/deployments.

8/10