Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/action-push-tag

🔖 GitHub Action to push a Git tag. Secure drop-in replacement for actions-ecosystem/action-push-tag.

10/10

Maintained by StepSecurity

coveo/ui-kit/.github/actions/e2e-atomic-next

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

envoyproxy/toolshed/gh-actions/github/env/summary

7/10

reitermarkus/automerge

Automatically merge approved pull requests with successful checks.

5/10

Maintained action available

project-dalec/dalec/.github/actions/enable-containerd

📦 Produce secure packages and containers with declarative configurations

7/10

grafana/mimir/_shared-workflows-dockerhub-login/actions/get-vault-secrets

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

7/10

helm/chart-releaser-action

A GitHub Action to turn a GitHub project into a self-hosted Helm chart repo, using helm/chart-releaser CLI tool

7/10

vmactions/dragonflybsd-vm

Use DragonFly BSD in github actions

5/10

Maintained action available

zaproxy/action-api-scan

A GitHub Action for running the ZAP API scan

6/10

generaltranslation/translate

General Translation GitHub Action

1/10

pytorch/text/test-infra/.github/actions/setup-windows

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10

super-linter/super-linter

Combination of multiple linters to run as a GitHub Action or standalone

10/10

step-security/github-actions-goat

GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

7/10

dineshsonachalam/markdown-autodocs

✨ A GitHub Action that automatically generates & updates markdown content (like your README.md) from external or remote files.

4/10

yonasBSD/surrealdb/.github/actions/quality-check

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10

Maintained action available

assignuser/stash/save

4/10

grafana/plugin-ci-workflows/actions/internal/get-bot-user

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

5/10

Maintained action available

install-pinned/wheel

Securely install the latest wheel release from PyPI.

3/10

utilitywarehouse/actions-buf/setup

3/10

jefflinse/pr-semver-bump

A GitHub Action to bump and tag a new semantic version when a pull request is merged.

4/10