Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

layr-labs/security-shared-workflows/actions/claude-pr-review

3/10

surrealdb/surrealdb/.github/actions/build-macos

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

ministryofjustice/hmpps-interventions-service/.github/actions/cloud-platform-deploy

Business/domain interface for providing rehabilitation services to service users

8/10

gaurav0/backport

🔙 GitHub Action to backport pull requests

0/10

davidanson/markdownlint-cli2-action

A GitHub Action to run the markdownlint-cli2 tool for linting Markdown/CommonMark files with the markdownlint library

7/10

nvidia/jax-tvm-ffi/.github/actions/detect-env-vars

JAX support for tvm-ffi abi

5/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/corporate

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

step-security/actions-comment-pull-request/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action to comment pull request. Secure drop-in replacement for thollander/actions-comment-pull-request.

10/10

step-security/ansible-galaxy-action

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

Maintained by StepSecurity

open-telemetry/assign-reviewers-action

GitHub action to assign reviewers/approvers/etc based on configuration

4/10

ledgerhq/ledger-live/tools/actions/composites/duplicate-avd

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

liquibase-github-actions/flow

🚨 DEPRECATED - Use liquibase/setup-liquibase | Official GitHub Action to run Liquibase Flow

3/10

oxidize-rb/actions/setup-ruby-and-rust

4/10

step-security/create-issue-from-file/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub action to create an issue using content from a file. Secure drop-in replacement for peter-evans/create-issue-from-file.

10/10

github/gh-aw/actions/setup-cli

GitHub Agentic Workflows

6/10

greenled/no-merge-commits-check

Action for checking no merge commits are present in a pull request

3/10

actions/download-artifact

5/10

rapidsai/shared-actions/dockerhub-script

6/10

ministryofjustice/laa-data-claims-api/.github/actions/get_release_name_to_delete

LAA Data Claims API

8/10

ministryofjustice/hmpps-assess-risks-and-needs-github-actions/.github/actions/cypress/merge_timings

Reusable Github workflows and actions across the ARNS space (bootstrapped 2025-02-24)

4/10