Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

metamask/cla-signature-bot

GitHub Action for self-contained handling of CLA signatures

3/10

cadwallion/publish-rubygems-action

2/10

opentofu/setup-opentofu

8/10

briansmith/actions-rs-toolchain

🛠️ GitHub Action for `rustup` commands

2/10

legoktm/gh-action-build-deb

GitHub Action for building Debian packages on Buster

3/10

googlecloudplatform/functions-framework-conformance/.github/actions/client/resolve-latest

A Tool for Validating Conformance to the Functions Framework Contract

3/10

grafana/mimir-prometheus/.github/promci/actions/build

7/10

ozi-project/draft

OZI release draft workflow.

6/10

bmos/fg-forge-updater

Submits updated packages to the FantasyGrounds Forge

6/10

notdodo/erfiume_bot

Bot per leggere i livelli idrometrici dei fiumi dell'Emilia Romagna riportati da allertameteo.regione.emilia-romagna.it.

5/10

Maintained action available

yonasbsd/rocksdb/.github/actions/perform-benchmarks

A library that provides an embeddable, persistent key-value store for fast storage.

5/10

Maintained action available

astral-sh/setup-uv

Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/

7/10

launchdarkly/opencensus-go-exporter-stackdriver/.github/actions/coverage

OpenCensus Go exporter for Stackdriver Monitoring and Trace

5/10

Maintained action available

step-security/setup-buildx-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

yonasbsd/grafana/actions/image

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10

Maintained action available

veeezo/docs-1/.github/actions/clone-translations

The open-source repo for docs.github.com

4/10

Maintained action available

coveo/plasma/.github/actions/compute-base-url

Plasma components implemented with React!

5/10

Maintained action available

siemens/wasm-micro-runtime/.github/actions/install-wasi-sdk-wabt

WebAssembly Micro Runtime (WAMR)

6/10

chronograph-pe/auto-assign-action

An action which adds reviewers to the pull request when the pull request is opened.

0/10

fermyon/actions/spin/setup

4/10