Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
equinor/fusion-project-portal/.github/actions/client-build
Project Portal powered By Fusion
grafana/plugin-ci-workflows/actions/plugins/trufflehog
Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins
step-integration-tests/auto-pdpr-test-38516-13/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
grafana/github-sync
โคต๏ธ A GitHub Action for syncing current repository with remote
aws-actions/aws-lambda-deploy
Deploys a Lambda function.
aws-actions/aws-codebuild-run-build
Run an AWS CodeBuild project as a step in a GitHub Actions workflow job.
sonarsource/release-github-actions/fill
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.
olegtarasov/get-tag
A GitHub action that gets current tag name and puts it into an environment variable
cybernop/push-fsh-profiles
step-security/allcheckspassed/__builder_checkout_dir__/.github/actions/privacy-check
GitHub Action to confirm that all checks reported on a commit have passed. Secure drop-in replacement for wechuli/allcheckspassed.
anthonyharrison/sbom4python
A tool to generate a SBOM (Software Bill of Materials) for an installed Python module
rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem-ci-result
Rstack Ecosystem CI
pre-commit/pre-commit-hooks
Some out-of-the-box hooks for pre-commit
nvidia/megatron-lm/.github/actions/check-nvidia-sso-membership
Ongoing research training transformer models at scale
edera-dev/actions/configure-azure-sccache
Shared GitHub Actions Repo
kong/slsa-generator/__builder_checkout_dir__/.github/actions/generate-attestations
Language-agnostic SLSA provenance generation for Github Actions
yaoyorozu-hi/sekisho
้ขๆ โ hardened release gate for tsukai-mcp Rust crates: a minimal, audited, SHA-pinned reusable publish workflow (crates.io Trusted Publishing via OIDC).
aerospike/aerospike-client-go/.github/actions/single-node-sc-cluster
Aerospike Client Go
step-integration-tests/auto-pdpr-test-61883-14/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
tomasreyes/kafka/.github/actions/gh-api-approve-run
Mirror of Apache Kafka