Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/github-action-get-latest-release/__builder_checkout_dir__/.github/actions/secure-download-artifact

A Github action to get the latest release from another repository. Secure drop-in replacement for pozetroninc/github-action-get-latest-release.

8/10

huntridge-labs/argus/.github/actions/linter-python

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

ctdiscordshared-lab/newrelic-quickstarts/.github/actions/bootstrap

New Relic One quickstarts help accelerate your New Relic journey by providing immediate value for your specific use cases.

2/10

step-security/list-files-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub action to list path of all files of a particular extension in the folder/directory specified by the user. Secure drop-in replacement for mirko-felice/list-files-action.

10/10

openzeppelin/tron-contracts-upgradeable/.github/actions/gas-compare

2/10

open-edge-platform/orch-ci/.github/actions/security/zizmor

Central hub for shared continuous integration (CI) workflows and actions for the Open-Edge-Platform project

8/10

dustin4444/opentelemetry.io/.github/actions/fail-if-branch-is-main

The OpenTelemetry website and documentation

5/10

Maintained action available

gradio-app/github/actions/commit-status

github helpers for gradio repos!

0/10

Maintained action available

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/setup-cache

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

5/10

extdn/github-actions-m2/magento-integration-tests/8.3

2/10

Maintained action available

haskell/actions/fill

Github actions for Haskell CI

1/10

shivammathur/setup-php/robots.txt

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

8/10

banyan/auto-label

A GitHub action to add labels to Pull Request based on matched file patterns

2/10

nvidia/nautobot-broker-nats/.github/actions/ci

This is an event broker for nautobot that publishes events to NATS.

4/10

octodemo/philips-actions-workshop/.github/actions/custom-js-action

0/10

jjchange10/test-actions/.github/actions/github-api-test-action

2/10

grafana/mimir/_shared-workflows-dockerhub-login/actions/image

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

8/10

step-security/action-markdownlint/__builder_checkout_dir__/.github/actions/secure-download-artifact

Run markdownlint with reviewdog. Secure drop-in replacement for reviewdog/action-markdownlint.

10/10

sonarsource/sonar-plugin-api/.actions/config-gradle

API to develop plugins for SonarQube (Server, Cloud) and SonarQube for IDE

8/10

actions/runner

The Runner for GitHub Actions :rocket:

9/10