Assess the risk of third-party GitHub Actions

open-edge-platform/orch-ci/.github/actions/security/zizmor

Central hub for shared continuous integration (CI) workflows and actions for the Open-Edge-Platform project

dustin4444/opentelemetry.io/.github/actions/fail-if-branch-is-main

The OpenTelemetry website and documentation

5/10

gradio-app/github/actions/commit-status

github helpers for gradio repos!

0/10

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/setup-cache

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

5/10

extdn/github-actions-m2/magento-integration-tests/8.3

haskell/actions/fill

Github actions for Haskell CI

1/10

shivammathur/setup-php/robots.txt

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

banyan/auto-label

A GitHub action to add labels to Pull Request based on matched file patterns

nvidia/nautobot-broker-nats/.github/actions/ci

This is an event broker for nautobot that publishes events to NATS.

4/10

octodemo/philips-actions-workshop/.github/actions/custom-js-action

0/10

jjchange10/test-actions/.github/actions/github-api-test-action

grafana/mimir/_shared-workflows-dockerhub-login/actions/image

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

step-security/action-markdownlint/__builder_checkout_dir__/.github/actions/secure-download-artifact

Run markdownlint with reviewdog. Secure drop-in replacement for reviewdog/action-markdownlint.

10/10

sonarsource/sonar-plugin-api/.actions/config-gradle

API to develop plugins for SonarQube (Server, Cloud) and SonarQube for IDE

actions/runner

The Runner for GitHub Actions :rocket:

9/10

scribe-security/action-slsa

Collect, Create and Store SLSA provenance evidence

ministryofjustice/laa-submit-a-bulk-claim/.github/actions/ecr-update-image-tags

Web application for bulk upload of claims data