Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

rapidsai/rmm/shared-actions/telemetry-impls/github-actions-job-info

RAPIDS Memory Manager

8/10

step-security/retry/__builder_checkout_dir__/.github/actions/privacy-check

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

10/10

envoyproxy/toolshed/actions/github/artifact/cache/save

7/10

step-security/sonarqube-scan-action/sidebar.tsx

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

9/10

endorlabs/github-action

A GitHub action you can use to scan with Endor Labs

4/10

step-security/ssh-agent/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to setup `ssh-agent` with a private key. Secure drop-in replacement for webfactory/ssh-agent.

10/10

grafana/shared-workflows/actions/validate-zizmor-config

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

7/10

warpbuilds/cache/restore

Cache dependencies and build outputs in GitHub Actions

2/10

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/docker-build

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

6/10

redhat-actions/common/action-io-generator

Repository for shared config files, actions and planning.

7/10

step-security/checkov-action

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues. Secure drop-in replacement for bridgecrewio/checkov-action.

10/10

Maintained by StepSecurity