Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

itchyny/s3-cache-action

GitHub Action to save cache files and restore them from Amazon S3

4/10

Maintained action available

openfga/action-openfga-deploy

Github Action for deploying your Authorization Model to an OpenFGA Store

7/10

cloudposse/github-action-terraform-auto-context

5/10

alexellis/setup-sshd-actor

This GitHub Action sets up an SSH server with the actor's SSH keys found on GitHub, preinstalled.

3/10

googleapis/release-please-action

automated releases based on conventional commits

6/10

step-security/github-action-get-latest-release/__builder_checkout_dir__/.github/actions/image

A Github action to get the latest release from another repository. Secure drop-in replacement for pozetroninc/github-action-get-latest-release.

10/10

4cloudguru/shared-workflows/.github/actions/check-artifact-trust

Reusable GitHub Actions workflows shared across the Terraform suite and pipeline-task families. Public so repos in both sethbacon/ and 4cloudguru/ can call them.

3/10

grafana/k6-definitelytyped/.github/actions/setup-for-scripts

The repository for high quality TypeScript type definitions.

5/10

dahlia/submark/setup

Extract a part from CommonMark/Markdown docs

3/10

gradio-app/github/actions/publish-pypi

github helpers for gradio repos!

0/10

getsentry/action-filter-paths

4/10

anysphere/action-setup

Install pnpm package manager

2/10

cloudposse/atmos/.github/actions/windows-gnu-tar

Atmos is the open-source runtime for infrastructure — it builds, authenticates, and ships Terraform, OpenTofu, Packer, Ansible, Kubernetes, Helm, and containers the same way on your laptop, in CI, and with AI agents.

7/10