Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/claude-code-action

Secure drop-in replacement for anthropics/claude-code-action.

10/10

Maintained by StepSecurity

talbring/jenkins-release-drafter

Drafts your next release notes as pull requests are merged into master. This is a FORK for the jenkinsci experiments. See https://github.com/toolmantim/release-drafter for upstream

2/10

athul/waka-readme

Wakatime Weekly Metrics on your Profile Readme.

5/10

grafana/mimir-loki/.github/actions/setup-k3d

Like Prometheus, but for logs.

2/10

cnkk/honeymarker-action

Action for honeymarker for dealing with per-dataset markers on https://honeycomb.io

2/10

elastic/oblt-actions/github/is-pr-author-member-of

7/10

apisec-inc/apisec-run-scan

This action triggers on-demand scans for projects registered in APIsec.

3/10

skitionek/notify-microsoft-teams

Github action to send comprehensive raport to Microsoft Teams

1/10

step-security/install-poetry/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Github action for installing and configuring Poetry. Secure drop-in replacement for snok/install-poetry.

10/10

chainguard-dev/malcontent-action

Run malcontent security scanner on pull requests to detect malicious behavior changes between commits

6/10

jwalton/gh-find-current-pr

Github Action for finding the Pull Request (PR) associated with the current SHA.

3/10

stelynx/dart-full-coverage

A GitHub Actions action for allowing coverage test tool to see all Dart files

2/10

architect/action-deploy

3/10

step-security/launchdarkly-gha-flags/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Evaluate LaunchDarkly flags in your GitHub Action workflow. Secure drop-in replacement for launchdarkly/gha-flags.

10/10

sredevopsorg/metabase/.github/actions/run-snowplow-micro

The simplest, fastest way to get business intelligence and analytics to everyone in your company :yum:

2/10

yonasBSD/wazuh/.github/actions/legacy_unit_tests_run

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

modeseven-lfreleng-actions/nexus-publish-action

Publishes content to Sonatype Nexus Repository servers

3/10

Maintained action available

step-security/pip-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Github Action to install Pip packages. Secure drop-in replacement for BSFishy/pip-action.

10/10

danielr1996/envsubst-action

Github Action for envsubst

3/10

fifsky/html-to-pdf-action

HTML to PDF for github actions

3/10