Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

oprypin/find-latest-tag

GitHub Action: Find the latest tag in a GitHub repository

3/10

adriangonz97/refined-cf-pages-action

2/10

politicalsphere/ci/.github/actions/ps-lint-tools

CI/CD pipelines and GitHub Actions for Political Sphere

3/10

Maintained action available

lucacome/draft-release

Draft the next GitHub release

6/10

nvidia/spark-rapids-common/shell-check

Reusable GitHub Actions workflows and common scripts for Spark RAPIDS

5/10

panva/node/.github/actions/install-clang

Node.js JavaScript runtime :sparkles::turtle::rocket::sparkles:

4/10

Maintained action available

step-security/jest-coverage-action-demo/.github/actions/test

8/10

ministryofjustice/laa-data-claims-api/.github/actions/deploy

LAA Data Claims API

8/10

ethlimo/ens-hooks/.github/actions/sbom

TypeScript library for encoding, decoding, and executing EIP-8121 hooks with ERC-7930 interoperable addresses

2/10

deepcode-ai/llama.cpp/.github/actions/windows-setup-curl

Port of Facebook's LLaMA model in C/C++

5/10

Maintained action available

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/cloud-platform-auth

Github actions for HMPPS projects

6/10

yonasbsd/wazuh/.github/actions/4_operational_prerelease_coverity_issue

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

mattermost/action-mattermost-notify

GitHub Action for sending a notification to a Mattermost channel

3/10

notaryproject/notation-action/verify

GitHub Actions for signing and verifying artifacts with Notation

5/10

grafana/grafana-github-actions-go/actions/bump-version

Grafana GitHub Actions in Golang

3/10

vision-web3/ci-workflows/.github/actions/install-poetry

3/10

oxidize-rb/actions/fetch-ci-data

4/10

Maintained action available

mad9000/actions-find-and-replace-string

A GitHub action to execute find-and-replace on strings

2/10

yonasbsd/surrealdb/.github/actions/docker-build

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10

Maintained action available

ministryofjustice/devsecops-actions/cruft/authenticate

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

8/10