Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

ministryofjustice/serve-opg/.github/workflows/_notify-slack.yml

Serve OPG: Managed by opg-org-infra & Terraform

7/10

step-security/tool-versions-action/__builder_checkout_dir__/.github/actions/privacy-check

output version numbers with .tool-versions file. Secure drop-in replacement for marocchino/tool-versions-action.

10/10

09168806659/metaplex-program-library/.github/actions/list-changed-files

Smart contracts maintained by the Metaplex team

2/10

reality2byte/action/image

7/10

anchore/go-make/.github/actions/image

7/10

github/command

IssueOps commands in GitHub Actions

5/10

actions/upload-artifact/merge

5/10

launchdarkly/go-test-helpers/.github/actions/unit-tests

Test convenience functions used by LaunchDarkly's Go-based open-source tools.

5/10

nvidia-nemo/safe-synthesizer/.github/actions/setup-python-env

:shield: NeMo Safe Synthesizer: Create private, safe versions of sensitive tabular datasets.

7/10

messense/maturin-action

GitHub Action to install and run a custom maturin command with built-in support for cross compilation

4/10

Maintained action available

ai/clean-npm-project

Make npm packages smaller by cleaning `package.json` and popular development configs

5/10

Maintained action available

step-security/setup-rust-toolchain/__builder_checkout_dir__/.github/actions/privacy-check

Setup a specific Rust toolchain with extra features like problem matchers. Secure drop-in replacement for actions-rust-lang/setup-rust-toolchain.

10/10

chainguard-dev/actions/eof-newline

A collection of reusable Github Actions workflows.

6/10

projectdiscovery/actions/public-layout.tsx

ProjectDiscovery's Composite Actions

7/10

nodoubtz-record-label/pipelines/.github/actions/public-layout.tsx

Machine Learning Pipelines for Kubeflow

4/10

cloudposse/github-action-deploy-argocd/fill

Deploy on Kubernetes with Helm/Helmfile and ArgoCD

6/10

buildsville/list-pull-requests

3/10

mock-server/setup-mockserver

GitHub Action to start a MockServer (HTTP(S) mock server & proxy) in CI and wait until ready.

3/10

denolib/setup-deno

Set up your GitHub Actions workflow with a specific version of deno

0/10

wlixcc/sftp-deploy-action

Deploy files to server use GitHub actions & SFTP

3/10