Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

bitwarden/ios/.github/actions/public-layout.tsx

Bitwarden mobile apps (Password Manager and Authenticator) for iOS.

7/10

step-integration-tests/auto-pdpr-test-57427-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

stakekit/signers/.github/composite_actions/initial_setup

The StakeKit Signers allows you to create a signing wallet instance from a mnemonic phrase or ledger app and sign transactions

1/10

neondatabase/gh-workflow-stats-action

GitHub Action to export Workflow statistic into Postgres

5/10

step-security/actions/melange-build

A collection of reusable Github Actions workflows.

5/10

Maintained action available

praetorian-inc/public-workflows/.github/actions/fill

This repo hosts shared workflows that could be called from other repos (both public or private) of Praetorian

5/10

Maintained action available

derjuulsn/todo-issue

🤖 GitHub Action which creates Issues from comments in your code

4/10

gradio-app/gradio/.github/actions/fill

Build and share delightful machine learning apps, all in Python. 🌟 Star to support our work!

6/10

notaryproject/notation-action/sign

GitHub Actions for signing and verifying artifacts with Notation

4/10

ministryofjustice/opg-github-actions/.github/actions/safe-strings

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

6/10

step-integration-tests/auto-pdpr-test-93245-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/setup-qemu-action/_next/static/chunks/86444-63fbcea17e6349ed.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

9/10

yonasbsd/rspack/.github/actions/artifact/download

A fast Rust-based web bundler.

5/10

Maintained action available

surrealdb/surrealdb/.github/actions/image

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

xt0rted/dotnet-format-problem-matcher

A GitHub Action that registers a problem matcher for dotnet-format's report output

2/10

step-integration-tests/auto-pdpr-test-57362-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

auguwu/clippy-action

🐻‍❄️📦 GitHub action to run Clippy, an up-to-date and modern version of actions-rs/clippy

4/10

Maintained action available

project-tick/project-tick/.github/actions/uvim/test_artifacts

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10

launchdarkly-labs/pr-downstream

A Github action to create a pull request on a downstream Go repository when changes to a library repository are merged.

4/10

step-security/github-actions-pr-is-linked-to-work-item/__builder_checkout_dir__/.github/actions/privacy-check

Check for linked Azure DevOps work item. Secure drop-in replacement for danhellem/github-actions-pr-is-linked-to-work-item.

10/10