Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/tag-push-action

Github action to copy/retag multiarch images from one registry to another. Secure drop-in replacement for akhilerm/tag-push-action.

10/10

Maintained by StepSecurity

ministryofjustice/opg-reports/.github/actions/get-aws-accounts-matrix

Development repository: Managed by opg-org-infra & Terraform

8/10

redhat-actions/push-to-registry

GitHub Action to push a container image to an image registry.

5/10

vendic/magento2-oh-dear/.github/actions/setup

Oh Dear application checks for Magento 2

2/10

themrmilchmann/setup-msvc-dev

Github Action to set up a Developer Command Prompt for Microsoft Visual C++

7/10

self-actuated/vmmeter-action

VM Metering

0/10

mooyoul/dynamodb-actions

Integrate Github Action with Amazon DynamoDB

2/10

step-security/setup-licensed/__builder_checkout_dir__/.github/actions/fill

Set up your GitHub Actions workflow with a specific version of licensee/licensed. Secure drop-in replacement for licensee/setup-licensed.

10/10

caffeelake/moby/.github/actions/setup-runner

The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

5/10

sonarsource/gh-action_releasability/.actions/get-build-number

SonarSource GitHub releasability action

5/10

step-security/dsanders11-project-actions/archive-item

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10

Maintained by StepSecurity

natescherer/pester-tests-report

GitHub Action to run Pester tests and generate report attached to Workflow Run

3/10

aquia-inc/base-docker-images/.github/actions/extract-versions

Base Docker images

8/10

step-security/actions-find-and-replace-string/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub action to execute find-and-replace on strings. Secure drop-in replacement for mad9000/actions-find-and-replace-string.

10/10

yonasbsd/greptimedb/.github/actions/setup-chaos

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10

Maintained action available

okta/samples-ios/.github/actions/setup-secrets

samples-ios

6/10

egor-tensin/setup-gcc

GitHub action to set up GCC

5/10

paneron/action-electron-builder

:electron: GitHub Action for building and releasing Electron apps

2/10

step-security/esigner-codesign/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for CodeSigner by SSL.com. Secure drop-in replacement for sslcom/esigner-codesign.

10/10

mschilde/auto-label-merge-conflicts

Github action to auto-label PRs with merge conflicts

2/10