Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

deliverybot/deployment-status

GitHub action for updating deployments with status events.

2/10

prowler-cloud/prowler/.github/actions/setup-python-uv

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

5/10

Maintained action available

step-security/setup-qemu-action/_next/static/chunks/78278-8878f2642e10241b.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

10/10

kong/slsa-github-generator/.github/actions/secure-upload-folder

Language-agnostic SLSA provenance generation for Github Actions

3/10

tanker187/stagehand/.github/actions/select-browserbase-region

The AI Browser Automation Framework

6/10

bainss/remove-stale-branches

Github action to remove stale branches

2/10

yonasbsd/slint/src/.github/actions/image

Slint is an open-source declarative GUI toolkit to build native user interfaces for Rust, C++, JavaScript, or Python apps.

4/10

Maintained action available

configcat/scan-repository

ConfigCat's repository scanner GitHub Action. ConfigCat is a hosted feature flag service: https://configcat.com. Manage feature toggles across frontend, backend, mobile, desktop apps. Alternative to LaunchDarkly. Management app + feature flag SDKs.

3/10

step-security/trufflehog-action

Find, verify, and analyze leaked credentials. Secure drop-in replacement for trufflesecurity/trufflehog.

10/10

Maintained by StepSecurity

step-security/docker-build-push-action/_next/static/chunks/60996-46ad4efc4ab03f23.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10

gen-os/androidx/.github/actions/build-single-project

Development environment for Android Jetpack extension libraries under the androidx namespace. Synchronized with Android Jetpack's primary development branch on AOSP.

2/10