Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/actions/setup-knative
A collection of reusable Github Actions workflows.
brennhill/sloppy-joe
Shields against supply-chain, slopsquatting, and typosquatting attacks from dependencies and code.
ministryofjustice/hmpps-probation-integration-services/.github/actions/setup-gradle
A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.
netapp/cloudstack/.github/actions/install-nonoss
Apache CloudStack is an opensource Infrastructure as a Service (IaaS) cloud computing platform
erayaha/anti-dark-pattern
CI/CD linter that catches legally risky dark patterns in front-end code. Blocks deceptive UI before it ships.
use-tusk/test-runner
Run Tusk-generated tests via a GitHub Action runner
nvidia/tensorrt-incubator/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container
Experimental projects related to TensorRT
plbstl/first-contribution
Automatically welcome first-time contributors on issues and pull requests
tbxark/docker-action
GitHub Action to build and push Docker images with Buildx
tempoxyz/gh-actions/vendor/helm/chart-testing-action
Reusable GitHub Actions for Tempo
turbocoder13/py-lintro/.github/actions/fill
Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.
elastic/elastic-otel-java/.github/workflows/image
cardinalby/export-env-action
GitHub Action that exports .env file variables to job env
dustin4444/node-semver/.github/actions/create-check
The semver parser for node (the one npm uses)
jj/pull-request-checks-action
Returns an array of checked slots in the body of the pull request.
devantler-tech/ksail/.github/actions/ksail-test-workload-watch
All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.
ministryofjustice/opg-github-actions/actions/test-env
OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform
step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/privacy-check
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.
actions-security-demo/pytorch/.github/actions/diskspace-cleanup
Tensors and Dynamic neural networks in Python with strong GPU acceleration
step-security/slsa-github-generator/.github/actions/secure-download-folder
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.