Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

assignuser/stash/restore

4/10

dflook/terraform-output

GitHub action to get outputs from a terraform configuration

2/10

ledgerhq/ledger-live/tools/actions/composites/setup-caches

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

kin0992/dev-toolkit/.github/actions/pulumi-setup

Platform Engineering toolkit: reusable GitHub Actions, AI Skills, and shared TypeScript configs.

5/10

pulumi/auth-actions

Simplify Pulumi authentication without having to configure secrets for your workflows.

6/10

meedamian/sync-readme

Github Action to sync README.md from Github to Docker Hub

3/10

tsukimarf/docs/.github/actions/cache-nextjs

The open-source repo for docs.github.com

2/10

nackerman-nydig/jinja2-action

Use the Jinja2 template engine as a GitHub action

1/10

timschoenle/actions/actions/bun/setup-cached

Centralized collection of reusable GitHub Actions, Workflows, and configurations.

7/10

step-security/powershell

GH Action to run Az PowerShell scripts for developers and administrators to develop, deploy, and manage Microsoft Azure applications. Secure drop-in replacement for azure/powershell.

9/10

Maintained by StepSecurity

install-pinned/uv

Securely install the latest uv release from PyPI.

5/10

Maintained action available

xbow-engineering/xbow-trivy-report-issue-action

Creates GitHub Issues from Trivy scan results

4/10

xresloader/upload-to-github-release

5/10

ai-dynamo/modelexpress/.github/actions/connect-vcluster

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10