Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
yonasbsd/ribir/.github/actions/fill
Non-intrusive GUI framework for Rust/WASM
bokuweb/sakimori
Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.
openzeppelin/moonkit/.github/workflow-templates/public-layout.tsx
Collection of open substrate pallets
launchdarkly/js-core/actions/run-example
LaunchDarkly monorepo for JavaScript SDKs
1password/load-secrets-action/image
Load secrets from 1Password into your GitHub Actions jobs
docker/setup-qemu-action
GitHub Action to install QEMU static binaries
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content
This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.
op5dev/tf-via-pr
Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.
mheap/github-action-required-labels
Fail the build if/unless a certain combination of labels are applied to a pull request
nanasess/setup-chromedriver
ChromeDriver for use in GitHub Actions
scribemd/docker-cache
Cache Docker Images Whether Built or Pulled
release-kit/semver
Parse semantic version from string or tag
peter-evans/create-issue-from-file
A GitHub action to create an issue using content from a file
coveo/ui-kit/.github/actions/setup-sfdx
Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.
tannergolden/standards/actions/open-pr
Reusable GitHub Actions workflows and composite actions for any language or toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, secret and dependency scanning, release automation, branch protection, and a shared label taxonomy.
koenrh/dnscontrol-action
Deploy your DNS configuration using GitHub Actions using DNSControl.
hashicorp/ghaction-import-gpg
DEPRECATED - GitHub action to import GPG private key
andife/tensorflow-onnx/.github/actions/unit_test
Convert TensorFlow, Keras, Tensorflow.js and Tflite models to ONNX
mitchellh/vouch/action/manage-by-issue
A community trust management system based on explicit vouches to participate.
asana/push-signed-commits
This composite Github Action uses the createCommitOnBranch GraphQL mutation to allow Github Apps to push 'Verified' commits to Github.