Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

pytorch/test-infra/.github/actions/calculate-docker-image

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

4/10

Maintained action available

equinor/fusion-project-portal/.github/actions/labeler

Project Portal powered By Fusion

4/10

step-security/argo-cd-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub action for executing Argo CD 🦑. Secure drop-in replacement for clowdhaus/argo-cd-action.

10/10

grafana/loki-release/actions/backport

Pipeline code for public releases of Loki and GEL

3/10

Maintained action available

cybernop/fill-fhir-cache

Provides tooling to fill in and inflate a local FHIR cache for a FSH project

3/10

jmuelbert/jm-python-template/.github/actions/python-setup

A template for new python projects

6/10

diskuv/dk-distribute

A GitHub Action to distribute your modules.

5/10

Maintained action available

microsoft/onnxruntime-github-actions/run-build-script-in-docker

Reusable GitHub Actions for ONNX Runtime repos. The actions are used for constructing ONNX Runtime's public pull request pipelines.

4/10

suisei-cn/actions-download-file

An action used to filter out a URL and download files for further works.

5/10

mathieudutour/github-tag-action

A Github Action to automatically bump and tag master, on merge, with the latest SemVer formatted version. Works on any platform.

3/10

yonasBSD/tempo/actions/metrics-collector

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

4/10

Maintained action available

google-github-actions/deploy-cloudrun

A GitHub Action for deploying services to Google Cloud Run.

6/10

elastic/elastic-agent-client/.github/actions/setup

4/10

step-security/actions/setup-registry

A collection of reusable Github Actions workflows.

7/10

PoliticalSphere/ci/.github/actions/ps-task/consumer-contract

CI/CD pipelines and GitHub Actions for Political Sphere

3/10

Maintained action available

GitGuardian/gg-shield-action

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

6/10

tomasreyes/attest-build-provenance

Action for generating build provenance attestations for workflow artifacts

5/10

Maintained action available

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/documentary

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

step-security/setup-vals

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

Maintained by StepSecurity

SonarSource/sonarcloud-github-action

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

7/10