Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

grafana/github-api-commit-action

Commits changes to the repository through the Github api instead of traditional git commands.

6/10

weseek/ghaction-release-slack-notification

2/10

bytemare/actions/init-go

A collection of hardened reusable Github Actions and Workflows.

7/10

step-security/changeset-action/.github/actions/ci-setup

Secure drop-in replacement for changesets/action.

10/10

step-security/sccache-action

sccache github action. Secure drop-in replacement for Mozilla-Actions/sccache-action.

9/10

Maintained by StepSecurity

centml/dynamo/.github/actions/docker-remote-build

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

smartcontractkit/.github/actions/ctf-show-grafana-in-test-summary

reusable GHA workflows and actions

5/10

Maintained action available

ministryofjustice/hmpps-probation-integration-services/.github/actions/render-project-template

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

richardsimko/update-tag

A Github action that simply tags the repository with the specified tag.

5/10

Maintained action available

step-security/ghaction-setup-docker/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to set up (download and install) Docker CE. Secure drop-in replacement for docker/setup-docker-action.

8/10

redhat-actions/crda

Scan your project's dependencies with Code Ready Dependency Analytics

3/10

marocchino/sticky-pull-request-comment

create comment on pull request, if exists update that comment.

6/10

ministryofjustice/hmpps-resettlement-passport-ui/.github/actions/setup-zap

Resettlement passport to prepare prisoner for release UI

7/10

dagster-io/dagster-cloud-action/actions/build_deploy_python_executable

4/10

mevisoft/formbricks/.github/actions/build-and-push-docker

4/10

Maintained action available

tailscale/gitops-acl-action

GitOps for your Tailscale ACLs

7/10

brycedorn/react-snap-action

Github Action for pre-rendering via react-snap.

0/10

docker/setup-buildx-action

GitHub Action to set up Docker Buildx

8/10

nodoubtz-record-label/node/node/.github/actions/install-clang

npm's fork of nodejs/node, for sending PRs to update deps/npm

3/10

glassechidna/artifact-cleaner

GitHub Action that can clean up old artifacts on a regular schedule

2/10