Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

onebrief/gotenberg/.github/actions/merge

A Docker-powered stateless API for PDF files.

6/10

rachmari/actions-add-new-issue-to-column

2/10

azure/policy-compliance-scan

A GitHub action that scans the Azure resources for policy violations.

4/10

xnox/octo-sts-action

3/10

approved-3rd-party-actions/actions/init-pants

Useful GitHub Actions that work with the Pants build system

3/10

mhils/workflows/setup-python

Reusable GitHub Actions Workflows

3/10

modeseven-lfreleng-actions/build-metadata-action

Universal action to capture and display metadata related to project builds

4/10

Maintained action available

coveo/plasma/.github/actions/publish

Plasma components implemented with React!

5/10

Maintained action available

pytorch/test-infra/test-infra/.github/actions/checkout

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

chikin-4x/ssh-key-action

GitHub Action that installs SSH key to .ssh

2/10

step-security/action-testng-report/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Actions TestNG Report Generator. Secure drop-in replacement for runekit-oss/action-testng-report.

8/10

imjasonh/setup-crane

6/10

step-security/publish-unit-test-result-action

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

10/10

Maintained by StepSecurity

step-security/zip-release/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action that can be used to create release zip archive. Secure drop-in replacement for TheDoctor0/zip-release.

10/10

elastic/docs-builder

7/10

1password/check-signed-commits-action

GitHub Action to check PRs for signed commits

4/10

namespace-actions/upload-artifact

A variant of actions/upload-action that stores artifact archives to Namespace high-performance storage.

2/10

matlab-actions/setup-matlab

Set up your GitHub Actions workflow with a specific version of MATLAB.

6/10

anchore/workflows/.github/actions/create-tag-via-deploy-key

reusable workflows to be used for the oss projects

7/10

m1ner79/github-twittction

GitHub Action to post on twitter when any event triggers on repository.

2/10