Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nguyengiabk/auto-assign-issue

GitHub action that auto-assigns issues to a user or users

2/10

reg-viz/reg-actions

A visual regression test tool for github actions :octocat:.

1/10

Maintained action available

anysphere/slack-action-status

Provide GitHub Actions status updates to Slack as jobs progress

2/10

1password/load-secrets-action/fill

Load secrets from 1Password into your GitHub Actions jobs

5/10

Maintained action available

wimpysworld/nothing-but-nix

Create a 130GB Nix ️store in GitHub runners ❄️ Multi-partition BTRFS RAID-0 for /nix 💪 Brutally purges unnecessary software 🪓 Dynamically grows the Nix store 📈

4/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/actions-upload-artifact

Github Action mirrored from https://github.com/actions/upload-artifact

1/10

Maintained action available

ludeeus/action-shellcheck

GitHub action for ShellCheck.

6/10

mwhitaker/dbt-action

Run and schedule dbt commands using Github Actions

3/10

tobyhs/codemention

GitHub Action to notify/mention people on pull requests

5/10

Maintained action available

sonarsource/sonar-packaging-maven-plugin/.actions/get-build-number

:package: Maven plugin for building SonarQube Server plugins

5/10

actions-security-demo/pytorch/.github/actions/upload-test-artifacts

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

step-security/setup-nasm/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to install NASM. Secure drop-in replacement for ilammy/setup-nasm.

10/10

canonical/action-tmate

Debug your GitHub Actions via SSH by using tmate to get access to the runner system itself.

3/10

llvm/actions/get-llvm-project-src

1/10

pytorch/pytorch/test-infra/.github/actions/checkout

Tensors and Dynamic neural networks in Python with strong GPU acceleration

4/10

Maintained action available

snyk/actions/gradle-jdk11

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

dependency-check/dependency-check_action

Github action to run dependency check

5/10

veeezo/docs-1/.github/actions/node-npm-setup

The open-source repo for docs.github.com

4/10

Maintained action available

jofthev/pytorch/.github/actions/upload-test-artifacts

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

sonarsource/sonarlint-vscode/.github/actions/download-vsix

SonarQube extension for Visual Studio Code providing code quality and security feedback directly in the editor

6/10