Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

rapidsai/shared-actions/shared-actions/telemetry-impls/set-otel-service-name

6/10

bnjbvr/cargo-machete

Remove unused Rust dependencies with this one weird trick!

6/10

tomtomb/changesets-action

2/10

github/licensed-ci

Update and check cached licenses in a GitHub Actions workflow

4/10

step-security/cross-platform-actions-action/__builder_checkout_dir__/.github/actions/privacy-check

Cross-platform GitHub action. Secure drop-in replacement for cross-platform-actions/action.

10/10

apache/skywalking-eyes/image

A full-featured license tool to check and fix license headers and resolve dependencies' licenses.

6/10

aerospike/aerospike-client-java/.github/actions/stage-release-artifacts

Aerospike Java Client Library

6/10

vmoens/test-infra/test-infra/.github/actions/teardown-linux

This repository hosts code that supports the testing infrastructure for the main PyTorch repo. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

0/10

dustin4444/k/.github/actions/setup-pyk-env

K Framework Tools 7.0

5/10

Maintained action available

step-security/change-string-case-action

Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.

8/10

Maintained by StepSecurity

ethpandaops/kurtosis-assertoor-github-action

3/10

jgillis/git-restore-mtime-action

A GitHub Workflow Action which restores timestamps of files in the current tree

3/10

ministryofjustice/cla_frontend/.github/actions/unit-tests

CLA Front End

7/10

step-security/test-reporting/__builder_checkout_dir__/.github/actions/privacy-check

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for phoenix-actions/test-reporting.

8/10

jbajic/buildifier

GitHub action for running Bazel's format tool buildifier.

4/10

burnett01/rsync-deployments

GitHub Action for deploying code via rsync over ssh securely - used by 5k+ workflows!

7/10

step-security/slackify-markdown-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to convert markdown into Slack's mrkdwn. Secure drop-in replacement for LoveToKnow/slackify-markdown-action.

8/10

step-security/proof-html

A GitHub Action to validate HTML, check links, and more ✅. Secure drop-in replacement for anishathalye/proof-html.

10/10

Maintained by StepSecurity

ledgerhq/send-to-allure-server-action

Compresses allure-results, sends to kochetkov-ma/allure-server , and triggers allure report generation

2/10

tanker187/pipelines/.github/actions/protobuf

Machine Learning Pipelines for Kubeflow

6/10