Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/slash-command-dispatch/__builder_checkout_dir__/.github/actions/fill

A GitHub action that facilitates "ChatOps" by creating repository dispatch events for slash commands. Secure drop-in replacement for peter-evans/slash-command-dispatch.

9/10

step-security/publish-crates/__builder_checkout_dir__/.github/actions/fill

GitHub action to get easy publishing of Rust crates. Secure drop-in replacement for katyo/publish-crates.

9/10

technote-space/get-git-comment-action

GitHub actions to get git comment.

2/10

secondlife/setup-cygwin

GitHub action to install Cygwin

5/10

step-security/lcov-reporter-action/__builder_checkout_dir__/.github/actions/privacy-check

Comments a pull request with the code coverage generated by your tests. Secure drop-in replacement for romeovs/lcov-reporter-action.

8/10

caffeelake/servo/.github/actions/setup-python

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

5/10

Maintained action available

anysphere/turbo-cache-server

Lightning-fast Turborepo remote cache server as a Github Action or Docker container

2/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/BUILDER_CHECKOUT_DIR__/.github/actions/wp-content/uploads/2017/10/the-theatre-orchard.png

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

gacts/run-and-post-run

🚀 A simple GitHub action that allows you to execute commands on place and in post-run, once a workflow job has ended.

5/10

Maintained action available

anchore/go-make/.github/actions/bootstrap

7/10

kong/slsa-generator/.github/actions/image

Language-agnostic SLSA provenance generation for Github Actions

3/10

navikt/familie-baks-gha-workflows/.github/actions/deploy

Felles GitHub Actions workflows for Team BAKS sine applikasjoner

8/10

actions-security-demo/script-injection/actions/close-milestone

2/10

cloudposse/github-action-atmos-affected-trigger-spacelift

A GitHub action to trigger spacelift for all atmos affected stacks

6/10

replicatedhq/replicated-actions/remove-cluster

5/10

Maintained action available

oxsecurity/megalinter/flavors/go

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10

step-security/action-android-lint

GitHub Action for Android Lint. Secure drop-in replacement for yutailang0119/action-android-lint.

10/10

Maintained by StepSecurity

grafana/mimir-loki/.github/actions/fill

Like Prometheus, but for logs.

2/10

envoyproxy/toolshed/gh-actions/appauth

7/10

sean0x42/markdown-extract

Extract sections of a markdown file. Useful for automatically extracting changelogs

4/10