Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

envoyproxy/toolshed/gh-actions/gpg/import

6/10

nvidia/visrtx/.github/actions/public-layout.tsx

OptiX + GL based implementations of ANARI

4/10

Maintained action available

sh-cho/cloudflare-docs/.github/actions/assign-pr

Cloudflare’s documentation

0/10

step-security/semver-utils/__builder_checkout_dir__/.github/actions/privacy-check

One-stop shop for working with semantic versions in your GitHub Actions workflows. Secure drop-in replacement for madhead/semver-utils.

8/10

distroless/actions/vul-scans

GitHub actions for the chainguard-images

8/10

loopwerk/tag-changelog

Automatically generate a changelog since the last tag, using the conventional commit format

2/10

fabricmc/fabric-action-scripts

A collection of custom scripts used by Fabric's Github action workflows

2/10

step-security/getsentry-action-release

GitHub Action for creating a release on Sentry. Secure drop-in replacement for getsentry/action-release.

9/10

Maintained by StepSecurity

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/viarise/checkout

Fork of upstream: https://github.com/actions/checkout

1/10

Maintained action available

gittools/actions/gitversion/execute

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

7/10

krider2010/slack-bot-action

A GitHub Action that posts to Slack (as a Bot) and will take arguments or data from previous Actions as the information to post.

2/10

ory/ci/licenses/setup

Automation and robots for Ory's CI and CD pipelines

5/10

Maintained action available

regclient/actions/regctl-installer

7/10

anz-bank/sysl-go-demo/.github/action/github-tag-action

Demo Application built using Sysl-Go. Serves as a platform for showcasing Sysl-Go features.

2/10

project-tick/project-tick/.github/actions/meshmc/setup-dependencies/windows

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10

reviewdog/action-actionlint/dockerless

run actionlint with reviewdog

5/10

Maintained action available

tempoxyz/mpp-tools/mpp-tools/.github/actions/setup-conformance

Tooling and test suites for managing MPP SDKs and other ecosystem primitives

5/10

Maintained action available

zingdevlimited/actions-helpers/azure/terraform-output

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks.

4/10

Maintained action available

devantler-tech/ksail/.github/actions/free-disk-space

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10

Maintained action available

gregziegan/fetch-latest-release

A tiny GitHub action to fetch the latest GitHub release for a given repository

3/10