Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
cloudposse/github-action-terratest
A GitHub action that runs terratest tests within the repo
infisical/secrets-action
Inject Infisical secrets into your Github workflows
useblacksmith/cache/fill
Cache dependencies and build outputs in GitHub Actions
step-security/cysharp-actions
Secure drop-in replacement for Cysharp/Actions.
chrnorm/deployment-status
GitHub action to create a deployment status update
step-security/workflow-status/__builder_checkout_dir__/.github/actions/privacy-check
Workflow Status Action. Secure drop-in replacement for martialonline/workflow-status.
step-integration-tests/auto-pdpr-test-71008-15/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
qsadyysy786-tech/gemini-cli/.github/actions/run-tests
An open-source AI agent that brings the power of Gemini directly into your terminal.
hoprnet/hopr-workflows/actions/upload-artifact-registry
GitHub workflows helping HOPR automate tasks via actions
step-integration-tests/auto-pdpr-test-93405-15/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
eliashaeussler/gha/.github/actions/setup-ddev
๐ Reusable GitHub Actions and Workflows for use in my personal projects
wdzeng/chrome-extension
GitHub action for publishing extensions to Chrome Web Store!
launchdarkly/dotnet-logging-adapter-log4net/.github/actions/release-build
Adapter from LaunchDarkly.Logging API to log4net
fossa-contrib/fossa-action
The action sets up and caches the latest release of fossa-cli, infer the correct configuration from the current system state, analyze the project for a list of its dependencies, and upload the results to FOSSA.
selfxyz/self/.github/actions/cache-pnpm
Prove your self
step-security/semver-utils
One-stop shop for working with semantic versions in your GitHub Actions workflows. Secure drop-in replacement for madhead/semver-utils.
nvidia/cudaqx/.github/actions/build-lib
Accelerated libraries for quantum-classical computing built on CUDA-Q.
posthog/posthog/.github/actions/get-pr-labels
:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools โ AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more โ capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.
sonarsource/release-github-actions/notify-failure
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.
dawidd6/action-send-mail/_next/static/chunks/48071-70deb82b0cfeb83f.js
:gear: GitHub Action for sending emails