Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-35163-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

oxc-project/security-action

5/10

step-integration-tests/auto-pdpr-test-22079-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

trunk-io/trunk-action/.trunk/fill

Trunk.io GitHub Action

7/10

step-security/helm-gh-pages

A GitHub Action for publishing Helm charts to Github Pages. Secure drop-in replacement for stefanprodan/helm-gh-pages.

10/10

Maintained by StepSecurity

yonasbsd/paradedb/.github/actions/public-layout.tsx

ParadeDB is a modern Elasticsearch alternative built on Postgres. Built for real-time, update-heavy workloads.

3/10

ditkrg/todo-to-issue-action

Action that converts TODO comments to GitHub issues on push.

3/10

step-security/slsa-github-generator/.github/actions/secure-download-artifact

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

8/10

Maintained by StepSecurity

clowdhaus/terraform-composite-actions/pre-commit

Contains composit GitHub actions for use with Terraform AWS Module workflows

3/10

openzeppelin/openzeppelin-relayer/.github/actions/oidc

OpenZeppelin Relayer

6/10

ministryofjustice/hmpps-probation-integration-services/.github/actions/format-code

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

reviewdog/action-pyflakes

Run pyflakes with reviewdog 🐶

5/10

Maintained action available

autotelic/action-wait-for-status-check

A GitHub action that waits for a specified Github Status Check to complete

3/10

jmertic/lfx-landscape-tools

Tools for updating a landscape from LFX

7/10

h0x0er/actions-runner-controller/.github/actions/execute-assert-arc-e2e

Kubernetes controller for GitHub Actions self-hosted runners

3/10

zvecr/automatic-approve-action

Automatically approve workflow runs for new contributors

2/10

coveo/ui-kit/.github/actions/e2e-atomic-search-vuejs

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

humbletim/install-vulkan-sdk

Automatically downloads and installs prebuilt Vulkan SDK releases.

5/10

ledgerhq/ledger-live/tools/actions/composites/setup-test-desktop

Mono-repository for Ledger Wallet apps and related packages

4/10

Maintained action available

coursgranja91-hash/erk/.github/actions/setup-prettier

erk is a tool for the orchestration and management of plan-oriented agentic engineering.

3/10