Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

microsoft/powerplatform-actions/upgrade-solution

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

5/10

chesszyh/gemini-cli-with-copilot/.github/actions/run-tests

An open-source AI agent that brings the power of Gemini directly into your terminal.

3/10

step-integration-tests/auto-pdpr-test-70594-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

launchdarkly/python-server-sdk/.github/actions/public-layout.tsx

LaunchDarkly Server-side SDK for Python

6/10

kusaridev/kusari-cli/__builder_checkout_dir__/.github/actions/public-layout.tsx

Command line interface for Kusari

8/10

rasahq/rasa-sdk/.github/actions/setup-python-env

SDK for the development of custom actions for Rasa

6/10

envoyproxy/toolshed/actions/github/env/load

7/10

ministryofjustice/opg-github-actions/.github/actions/public-layout.tsx

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

6/10

step-security/actions-go-build

Define a reproducible Go build. Secure drop-in replacement for hashicorp/actions-go-build.

9/10

Maintained by StepSecurity

docker/build-push-action

GitHub Action to build and push Docker images with Buildx

8/10

hashicorp/actions-go-build/fill

Define a reproducible Go build.

4/10

step-security/action-regex-match/__builder_checkout_dir__/.github/actions/privacy-check

🔍 GitHub Action to do regex matching. Secure drop-in replacement for actions-ecosystem/action-regex-match.

8/10

ministryofjustice/laa-claim-for-payment/.github/actions/build_and_push

E2E Transformation provider claim service and api

8/10

envoyproxy/toolshed/actions/cache/prime

7/10

equinor/fusion-web-components/.github/workflows/actions/image

repository for Fusion web components

6/10

sonarsource/sonar-ruby/.actions/get-build-number

Ruby analyzer

6/10

nvidia-nemo/curator/fw-ci-templates/.github/actions/public-layout.tsx

Scalable data pre processing and curation toolkit for LLMs

8/10

dawidd6/action-delete-branch

:gear: A GitHub Action to delete multiple branches

0/10

siemens/ix/.github/workflows/actions/turbo

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

6/10

cyber-dojo/reusable-actions-workflows/.github/actions/attest-and-evaluate

Github Action workflows used by repos in the cyber-dojo Org

5/10

Maintained action available