Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

neondatabase/neon/.github/actions/upload

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

3/10

surrealdb/surrealdb/.github/actions/setup-environment

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

rajbos-actions/variable-substitution

Enable GitHub developers to parameterize the values in their config files from a GitHub Action workflow

7/10

jrubics/poetry-publish

An action to build and publish python package to pypi (https://pypi.org/) using poetry (https://github.com/sdispater/poetry)

6/10

rubilmax/foundry-storage-check

🔐 Protect your Smart Contract Proxy from storage collisions upon upgrading, by running this action in a CI on each of your Pull Requests!

0/10

ministryofjustice/devsecops-actions/sca/repository

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

8/10

emqx/macos-erlang

Action to install EMQX fork of Erlang/OTP on macOS

3/10

caffeelake/cilium/.github/actions/set-env-variables

eBPF-based Networking, Security, and Observability

3/10

pytorch/torchrec/test-infra/.github/actions/setup-binary-builds

Pytorch domain library for recommendation systems

3/10

Maintained action available

slsa-framework/slsa-verifier/actions/installer

Verify provenance from SLSA compliant builders

4/10

reviewdog/action-remark-lint

Run remark-lint with Reviewdog :dog:

2/10

equinor/fusion-project-portal/.github/actions/config-git-user

Project Portal powered By Fusion

4/10

hashicorp/setup-terraform

Sets up Terraform CLI in your GitHub Actions workflow.

8/10

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/cloud-platform-cleanup

Github actions for HMPPS projects

6/10

joonvena/robotframework-reporter-action

This action can be used to send parsed test report as comment to that commit that triggered test run

3/10

yonasbsd/surrealdb/.github/actions/quality-clippy

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10

Maintained action available

caffeelake/gleam/.github/actions/build-container

⭐️ A friendly language for building type-safe, scalable systems!

2/10

androidx/changed-files-action

GitHub Action that manages build workflow for Playground projects

5/10

kubewarden/kubewarden-controller

Manage admission policies in your Kubernetes cluster with ease

5/10

Maintained action available

09168806659/metaplex-program-library/.github/actions/parse-version-command

Smart contracts maintained by the Metaplex team

2/10