Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

einaregilsson/beanstalk-deploy

GitHub action (and command line script) to deploy apps to Elastic Beanstalk

5/10

envoyproxy/toolshed/actions/buildah

7/10

mikepenz/action-gh-release

📦 :octocat: GitHub Action for creating GitHub Releases

6/10

myrotvorets/composite-actions/node-prepublish

Composite actions used by our workflows

5/10

Maintained action available

bobankh/auto-generate-changelog

A Github Action to generate CHANGELOG automatically according to conventional commits. Feel free to contribute!

3/10

hoprnet/hopr-workflows/actions/setup-node-js

GitHub workflows helping HOPR automate tasks via actions

6/10

pytorch/pytorch/.github/actions/download-build-artifacts

Tensors and Dynamic neural networks in Python with strong GPU acceleration

5/10

Maintained action available

stainless-api/upload-openapi-spec-action/build

A GitHub action to build Stainless SDKs.

1/10

launchdarkly/dotnet-eventsource/.github/actions/fill

Server-sent events (SSE) client implementation for .NET

6/10

loligothick/rustfmt-check

GitHub Action for PR annotations with rustfmt checks

3/10

Maintained action available

step-security/setup-protoc

GitHub Action to setup the protoc compiler for protocol buffers. Secure drop-in replacement for arduino/setup-protoc.

10/10

Maintained by StepSecurity

ministryofjustice/laa-claim-for-payment-frontend/.github/actions/setup_npm_and_yarn

Frontend application for the LAA Claim for Payment service

6/10

lgtm-hq/lgtm-ci/.github/actions/trigger-homebrew-update

Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions

7/10

tetherto/qvac/.github/actions/overlay-local-fabric

Open-source local AI SDK - run AI on-device with no cloud, no API keys. Supports GGUF, RAG, image, music, and video generation, speech-to-text, P2P inference, and more. Cross-platform: Linux, macOS, Windows, Android, iOS.

6/10

derberg/.github-asyncapi/.github/actions/image

Location of all reusable community health files

4/10

home-assistant/builder/actions/image

Home Assistant builder script

7/10

hashicorp/tfc-workflows-github/actions/image

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

6/10

aerospike/aerospike-client-nodejs/.github/actions/setup-docker-on-macos

Node.js client for the Aerospike database

4/10

statsig-io/statsig-publish-sdk-action/ruby

1/10

ministryofjustice/laa-crime-equinity-historical-data-frontend/.github/actions/public-layout.tsx

Front-end to view and access to historical data from Equiniti

4/10