Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
actionshub/chef-delivery
Repository for the chef-delivery-action Github Action
elastic/apm-agent-java/.github/workflows/stash
devantler-tech/actions/setup-ksail-action
Actions designed to streamline CI/CD processes.
step-security/set-github-variable/__builder_checkout_dir__/.github/actions/secure-download-artifact
Use this Github Action to update a variable in your Github Action Workflows for your repository. Secure drop-in replacement for mmoyaferrer/set-github-variable.
dustin4444/docs-v2/.github/actions/build-docs-site
InfluxData Documentation that covers InfluxDB Cloud, InfluxDB OSS 2.x, InfluxDB OSS 1.x, InfluxDB Enterprise, Telegraf, Chronograf, Kapacitor, and Flux.
metamask/github-tools/.github/actions/create-release-pr
An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews
yonasbsd/teleport/.github/actions/image
The easiest, most secure way to access infrastructure.
fortify/github-action/internal/fod-logout
Fortify GitHub Actions
elastic/docs-actions/docs-builder/preview/cleanup
edera-dev/sccache/.github/actions/artifact_failure
Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.
tanker187/terraform/.github/actions/go-version
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
space-wizards/submodule-dependency
GitHub action to checkout submodule changes that are required for a pull request
seemethere/download-artifact-s3
estroz/rerun-actions
A GitHub App that re-runs Action Workflows via PR comment commands.
yonasbsd/ribir/.github/actions/fill
Non-intrusive GUI framework for Rust/WASM
bokuweb/sakimori
Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.
openzeppelin/moonkit/.github/workflow-templates/public-layout.tsx
Collection of open substrate pallets
launchdarkly/js-core/actions/run-example
LaunchDarkly monorepo for JavaScript SDKs
1password/load-secrets-action/image
Load secrets from 1Password into your GitHub Actions jobs
docker/setup-qemu-action
GitHub Action to install QEMU static binaries