Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/allure-action/__builder_checkout_dir__/.github/actions/privacy-check
Secure drop-in replacement for allure-framework/allure-action.
microsoft/msbuild
The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.
tlmsllc/copilot-sdk/.github/actions/setup-copilot
Multi-platform SDK for integrating GitHub Copilot Agent into apps and services
envoyproxy/toolshed/gh-actions/bson
dangoslen/changelog-enforcer
A simple GitHub action that enforces that a maintained changelog is kept up to date.
kentaro-m/task-completed-checker-action
:ballot_box_with_check: A GitHub action that checks if all tasks are completed in the pull requests.
meta-introspector/checkout
Action for checking out a repo
step-security/changeset-action/__builder_checkout_dir__/.github/actions/privacy-check
Secure drop-in replacement for changesets/action.
ai-dynamo/modelexpress/.github/actions/run-mx-p2p-test
Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.
slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout
Language-agnostic SLSA provenance generation for Github Actions
pytorch/pytorch/.github/actions/reuse-old-whl
Tensors and Dynamic neural networks in Python with strong GPU acceleration
softprops/action-gh-release/_next/static/chunks/11621-dab816603cd195b7.js
๐ฆ :octocat: GitHub Action for creating GitHub Releases
pytorch/pytorch/.github/actions/pytest-cache-upload
Tensors and Dynamic neural networks in Python with strong GPU acceleration
buildless/setup-node
Set up your GitHub Actions workflow with a specific version of node.js
zoispag/action-assign-milestone
GitHub action to assign a milestone to pull requests
hastd/blue-build-github-action
Reusable GitHub Action to build custom images
jofthev/docs/.github/actions/setup-elasticsearch.md
The open-source repo for docs.github.com
sandersaarond/shared-workflows/actions/publish-backend-plugin-on-site
A public-facing, centralized place to store reusable workflows used by Grafana Labs.
step-security/short-sha/__builder_checkout_dir__/.github/actions/secure-download-artifact
Github Action to shorten the git SHA1 and make it accessible in outputs. Secure drop-in replacement for benjlevesque/short-sha.
chronograph-pe/get-current-time
This action sets the current ISO8601 time to the time output and also provides readableTime, formattedTime, and many more digital outputs like year, day, second, etc. Useful for setting build times in subsequent steps, renaming your artifact, or keeping the same recorded time for the entire workflow.