Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

srebhan/label-milestone-action

Github action to assign milestones to PRs based on labels

3/10

andstor/file-reader-action

:page_facing_up: :octocat: GitHub Action to read the contents of a file

2/10

step-security/action-discord

🚀 GitHub Action that sends a Discord message. . Secure drop-in replacement for Ilshidur/action-discord.

10/10

Maintained by StepSecurity

cpcloud/nixpkgs/.github/actions/checkout

Nix Packages collection

3/10

Maintained action available

jenseng/dynamic-uses

Dynamically resolve and use another GitHub action

4/10

wpengine/github-action-wpe-site-deploy

A GitHub Action to deploy code directly to WP Engine.

7/10

lfreleng-actions/pypi-publish-action

Publishes a Python project to the Python Package Index (PyPI)

4/10

Maintained action available

yonasbsd/wazuh/.github/actions/5_builderpackage_windows-smoke-upgrade-test

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

gr2m/get-json-paths-action

A GitHub Action to access deep values of JSON strings

2/10

pytorch/fbgemm/test-infra/.github/actions/setup-binary-builds

FB (Facebook) + GEMM (General Matrix-Matrix Multiplication) - https://code.fb.com/ml-applications/fbgemm/

2/10

Maintained action available

cisagov/setup-go-package

Composite GitHub action to install a Go package.

7/10

orhun/cargo-semver-checks-action

A GitHub Action for running cargo-semver-checks

2/10

approved-3rd-party-actions/branch-protection

0/10

yonasbsd/wazuh/.github/actions/build_target_cpp

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

anchore/workflows/.github/actions/bootstrap

reusable workflows to be used for the oss projects

8/10

shivammathur/setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

9/10

approved-3rd-party-actions/action-get-release

Get a Github release

2/10

modeseven-lfreleng-actions/tag-validate-action

Process and validate Git tags, check signing type/status

4/10

Maintained action available

mkarle/skonsole-generate-pr-description

A PR tool that uses Microsoft's Semantic Kernel and LLMs to generate PR descriptions

3/10

chronograph-pe/build-push-action

GitHub Action to build and push Docker images with Buildx

3/10