Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/workflow-dispatch/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A GitHub Action for triggering workflows, using the `workflow_dispatch` event. Secure drop-in replacement for benc-uk/workflow-dispatch.

10/10

AppImageCrafters/build-appimage

GitHub Action for producing AppImages

3/10

containerd/project-checks

This cross-project repository holds utilities, scripts, and common files used across the containerd master project and many sub-projects within the containerd organization

5/10

getsentry/action-self-hosted-e2e-tests

A centralized location for self-hosted end-to-end tests

6/10

tktl-forks/paths-filter

Conditionally run actions based on files modified by PR, feature branch or pushed commits

2/10

cshein45-Movement/MOVE-Token

Movement Ecosystem

4/10

pytorch/pytorch/.github/actions/upload-sccache-stats

Tensors and Dynamic neural networks in Python with strong GPU acceleration

4/10

Maintained action available

protocolbuffers/protobuf-ci/bazel

A shared repository for Protobuf CI actions

5/10

elastic/oblt-actions/version-framework

7/10

step-security/action-misspell/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Run misspell with reviewdog. Secure drop-in replacement for reviewdog/action-misspell.

10/10

LuDuda/oss-fuzz/infra/cifuzz/actions/run_fuzzers

OSS-Fuzz - continuous fuzzing for open source software.

2/10

unsplash/comment-on-pr

A GitHub Action to comment on the relevant open PR when a commit is pushed.

4/10

ministryofjustice/hmpps-probation-integration-services/.github/actions/docker-build

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

elide-dev/oxc/.github/actions/archive-binary

⚓ A collection of JavaScript tools written in Rust.

5/10

Maintained action available

TBXark/docker-action

GitHub Action to build and push Docker images with Buildx

3/10

os-climate/osc-github-devops/.github/actions/github-labels-action

Template Python project, common tests, GitHub Actions/Workflows, linting tools

3/10

Maintained action available

step-security/install-poetry

Github action for installing and configuring Poetry. Secure drop-in replacement for snok/install-poetry.

10/10

Maintained by StepSecurity

step-security/proof-html/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A GitHub Action to validate HTML, check links, and more ✅. Secure drop-in replacement for anishathalye/proof-html.

10/10

snapcrafters/ci/test-snap-build

Repository for shared CI tools and actions

4/10

hynek/build-and-inspect-python-package

Build and Inspect Python Packages in GitHub Actions

8/10