Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

github/codeql-action

Actions for running CodeQL analysis

9/10

smallstep/action-install-step-cli

A GitHub Action to install step CLI on Linux and MacOS.

4/10

pullpreview/action

A GitHub Action that starts preview deployments for your pull requests and branches. It can work with any application that has a valid Docker Compose file.

2/10

coactions/setup-xvfb

Run your tests headlessly by enabling xvfb

6/10

1Password/load-secrets-action

Load secrets from 1Password into your GitHub Actions jobs

7/10

pandaswhocode/rootly-incident-action

Typescript action for creating rootly incidents (and alerts)

5/10

Maintained action available

actions/cache/save

Cache dependencies and build outputs in GitHub Actions

8/10

grafana/k6-extension-actions/setup-k6lint

Reusable composite GitHub actions to support k6 extension development.

4/10

step-security/mongodb-github-action

Use MongoDB in GitHub Actions. Secure drop-in replacement for supercharge/mongodb-github-action.

10/10

Maintained by StepSecurity

codingjoe/word-weasel

Elevate your technical writing!

5/10

binary-install/setup-x

GitHub Action to install binaries using binstaller-generated scripts with verification

4/10

bytecodealliance/wasmtime/.github/actions/binary-compatible-builds

A lightweight WebAssembly runtime that is fast, secure, and standards-compliant

7/10

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/build_docker

Github actions for HMPPS projects

6/10

yonasBSD/rocksdb/.github/actions/install-jdk8-on-macos

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

Maintained action available

step-security/protobuf-ci/ccache

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

dyladan/component-owners

Automatically add component owners as assignees and approvers to pull requests

3/10

gacts/purge-jsdelivr-cache

🚀 GitHub action for the jsDelivr cache purging

2/10

step-security/docker-build-push-action/action

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10

shogo82148/actions-create-release

Yet Another Create Release Action

5/10

Maintained action available

pytorch/executorch/test-infra/.github/actions/setup-miniconda

On-device AI across mobile, embedded and edge for PyTorch

2/10

Maintained action available