Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

paddlehq/go-pgdump/.github/actions/setup-go

Go library to create PostgreSQL dumps without external dependencies.

4/10

styfle/cancel-workflow-action

⏹️ GitHub Action to cancel previous running workflows on push

6/10

metamask/skip-duplicate-actions

Save time and cost when using GitHub Actions

0/10

falcosecurity/libs/.github/actions/install-zig

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

8/10

redhat-actions/openshift-tools-installer

Download, install and cache OpenShift binaries into your GitHub Actions runners.

9/10

maxim-lobanov/setup-cocoapods

Set up your GitHub Actions workflow with a specific version of Cocoapods

3/10

dustin4444/next.js/.github/actions/public-layout.tsx

The React Framework

5/10

Maintained action available

envoyproxy/toolshed/actions/fill

7/10

yonasbsd/codeql/codeql/.github/actions/fetch-codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

3/10

Maintained action available

google/osv-scanner/actions/fill

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

6/10

nvidia-nemo/safe-synthesizer/.github/actions/fill

:shield: NeMo Safe Synthesizer: Create private, safe versions of sensitive tabular datasets.

7/10

ministryofjustice/laa-assure-hmrc-data/.github/actions/build_and_push

LAA Assure HMRC Data

7/10

bitwarden/gh-actions/trigger-actions

Bitwarden-utilized GitHub Actions.

5/10

Maintained action available

elide-dev/musl-toolchain/image

Prepackaged natives for Elide, built against musl libc

2/10

metamask/github-tools/.github/actions/log-merge-group-failure

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

5/10

Maintained action available

step-security/action-setup/__builder_checkout_dir__/.github/actions/privacy-check

Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.

9/10

trunk-io/trunk-action

Trunk.io GitHub Action

8/10

coinbase/cdp-sdk/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Client libraries for managing EVM and Solana wallets while relying on CDP to secure private keys.

6/10

smartcontractkit/chainlink-solana/.github/actions/image

3/10

Maintained action available

step-security/slack-github-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

Send data into Slack using this GitHub Action!. Secure drop-in replacement for slackapi/slack-github-action.

10/10