Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/tfclean

tfclean is tool to remove applied moved block, import block, etc. Secure drop-in replacement for takaishi/tfclean.

8/10

Maintained by StepSecurity

rustcrypto/actions/zlint-install

GitHub Actions configs: composite actions and shared workflow configuration

3/10

Maintained action available

anysphere/import-codesign-certs

GitHub Action for Importing Code-signing Certificates into a Keychain

2/10

step-security/release-drafter/public-layout.tsx

Drafts your next release notes as pull requests are merged into master. Secure drop-in replacement for release-drafter/release-drafter.

10/10

asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/step-security-icon.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10

sarj-ai/repo-standards/pull-request-commits

Deterministic repository architecture, delivery, pull-request, and API contract analysis.

4/10

sasobadovinac/freecad/.github/workflows/actions/runpythontests

Fork of the official git master branch of FreeCAD

7/10

repo-sync/github-sync

⤵️ A GitHub Action for syncing current repository with remote

0/10

simonmarty/aws-secretsmanager-get-secrets/.github/actions/fill

3/10

bytecodealliance/actions/wasm-tools/image

GitHub actions to setup wasm-tools and wasmtime

2/10

yonasbsd/surrealdb/.github/actions/fill

A scalable, distributed, collaborative, document-graph database, for the realtime web

2/10

jahid11978/openclaw-jahid.ai/.github/actions/create-generated-pr-tokens

jahid

4/10

Maintained action available

k0-rr/freecodecamp/tools/crowdin/actions/unhide-specific-string

freeCodeCamp.org's open source codebase and curriculum. Learn to code for free.

3/10

dustin4444/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-upload-artifact

Language-agnostic SLSA provenance generation for Github Actions

3/10

step-integration-tests/auto-pdpr-test-61350-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nvidia-merlin/.github/actions/branch-name

2/10

secretonline/minecraft-actions/public-layout.tsx

A collection of GitHub actions to aid in mod and modpack development for Minecraft

2/10

Maintained action available

servo/ci-runners/actions/checkout

GitHub Actions runners

4/10

Maintained action available

jfrog/.github/actions/install-local-artifactory

3/10

nuget/login

Connect to nuget.org

4/10