Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

actions/hello-world-javascript-action

A template to demonstrate how to build a JavaScript action.

8/10

step-security/setup-gh-cli-action/.github/actions/generate-action-code

A GitHub action that installs or updates the gh CLI. Secure drop-in replacement for sersoft-gmbh/setup-gh-cli-action.

10/10

step-security/action-add-labels/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

🏷️ GitHub Action to add labels. Secure drop-in replacement for actions-ecosystem/action-add-labels.

10/10

jozu-ai/gh-kit-setup

GitHub action for installing kit CLI

3/10

foxundermoon/feishu-action

feishu custom bot action

2/10

agilepathway/label-checker

Check pull requests for the presence or absence of specified labels

5/10

manusa/actions-setup-minikube

Set up your GitHub Actions workflow with a specific version of Minikube and Kuberentes

3/10

grafana/prometheus-alertmanager/.github/promci/actions/build

Prometheus Alertmanager

4/10

mathiasvr/command-output

GitHub action that runs a command and store its output

3/10

cilium/cilium/.github/actions/conn-disrupt-test

eBPF-based Networking, Security, and Observability

7/10

actions-rust-lang/rustfmt

Check formatting of Rust code with rustfmt

5/10

step-security/claude-code-action/base-action

Secure drop-in replacement for anthropics/claude-code-action.

10/10

Maintained by StepSecurity

cilium/scale-tests-action/install-kops

Repository that hosts the GitHub action to run scale tests

3/10

launchdarkly/find-code-references

Find references to feature flags in your code

4/10

albertlockett/publish-crates

GitHub action to get easy publishing of Rust crates

2/10

leafo/gh-actions-luarocks

GitHub action for installing LuaRocks

4/10

davelosert/vitest-coverage-report-action

A GitHub Action to report vitest test coverage results

8/10

gatsbyjs/stale

Marks issues and pull requests that have not had recent interaction

3/10

julie-ng/lowercase-linter

GitHub Action to ensure files are lower case only. Suggests valid names in kebab-case format.

2/10

microsoft/setup-msbuild

A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.

6/10