Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mavrosxristoforos/get-xml-info

Get Information from XML files to use into your GitHub workflows

5/10

MetaMask/github-tools/.github/actions/pr-line-check

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

5/10

Maintained action available

chronograph-pe/actions-permissions/monitor

GitHub token permissions Monitor and Advisor actions

3/10

actions-security-demo/script-injection/actions/commands

2/10

shundor/python-bandit-scan

GitHub Action for Bandit SAST

5/10

equinor/oneseismic-api/.github/actions/load_openvds_image

Web API for fast access of arbitrary seismic slices from VDS data

6/10

crazy-max/ghaction-docker-buildx

:octocat: GitHub Action to set up Docker Buildx

3/10

kubepug/kubepug-installer

kubepug-installer GitHub Action

5/10

bryannice/gitactions-slack-notification

Git Action Slack Notifications From Build Status

3/10

rudderlabs/setup-aws-signer-notation-cli

This GitHub Action installs Notation CLI with the AWS Signer plugin.

3/10

quantco/ui-actions/version-metadata

Monorepo for UI related github actions

2/10

step-security/secure-repo/Automate-PR

Orchestrate GitHub Actions Security

6/10

intel/ai-containers/apptainer

This repository contains Dockerfiles, scripts, yaml files, Helm charts, etc. used to scale out AI containers with versions of TensorFlow and PyTorch that have been optimized for Intel platforms. Scaling is done with python, Docker, kubernetes, kubeflow, cnvrg.io, Helm, and other container orchestration frameworks for use in the cloud and on-premise

7/10