Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

elastic/elastic-otel-python/.github/actions/env-install

8/10

spotdemo4/bumper

git semantic version conventional commit bumper

6/10

step-security/task-completed-checker-action

:ballot_box_with_check: A GitHub action that checks if all tasks are completed in the pull requests. Secure drop-in replacement for kentaro-m/task-completed-checker-action.

10/10

Maintained by StepSecurity

endocrimes/setup-nomad

A GitHub Action to install HashiCorp's Nomad.

2/10

nvidia/cucollections/.github/actions/configure_cccl_sccache

8/10

fathym/github-tag-action

A Github Action to tag a repo on merge.

3/10

home-assistant/wheels

Build wheels for Home Assistant

7/10

step-security/setup-opentofu/__builder_checkout_dir__/.github/actions/public-layout.tsx

Secure drop-in replacement for opentofu/setup-opentofu.

10/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_failure_results

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

4/10

step-security/setup-zig/__builder_checkout_dir__/.github/actions/secure-download-artifact

Install a Zig compiler for usage in GitHub Actions workflows. Secure drop-in replacement for mlugg/setup-zig.

10/10

sasobadovinac/pytorch/.github/actions/upload-utilization-stats

Tensors and Dynamic neural networks in Python with strong GPU acceleration

4/10

Maintained action available

step-security/github-app-token

Impersonate a GitHub App in a GitHub Action. Secure drop-in replacement for tibdex/github-app-token.

10/10

Maintained by StepSecurity

grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

nvidia-rtx/godot/.github/actions/godot-converter-test

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10

Maintained action available

coveo/ui-kit/.github/actions/e2e-atomic-screenshots

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

gagoar/invoke-aws-lambda

GitHub action to invoke AWS lambda

3/10

nais/deploy/actions/deploy

Nais deploy: multi-cluster Kubernetes deployments

7/10

wei/git-sync

🔃 A GitHub Action for syncing between two independent repositories using force push

3/10

firedancer-io/firedancer/.github/actions/cpusonline

Firedancer is Jump Crypto's Solana validator software.

5/10

Maintained action available

softprops/action-gh-release/_next/static/chunks/webpack-30ad75d8c88f588e.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10

Maintained action available