Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities. Secure drop-in replacement for aquasecurity/trivy-action.

6/10

chainguard-dev/actions/setup-eksctl

A collection of reusable Github Actions workflows.

8/10

dallemon/images/.github/actions/verify-readme

Public Chainguard Images

3/10

step-security/runs-on-cache/save

Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.

10/10

Maintained by StepSecurity

coveo/ui-kit/.github/actions/image

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

rudderlabs/rudder-tracking-plan-action

A github action to enable use of rudder-cli from within github repository

4/10

asdf-vm/actions/install

GitHub Actions for the asdf version manager

5/10

ievangelist/profanity-filter

Potty Mouth: A GitHub Action profanity filter written in .NET, leveraging Native AOT compilation.

3/10

Maintained action available

scoopinstaller/githubactions

Github Actions for Scoop buckets

7/10

retypeapp/action-build

Retype build action

6/10

suzuki-shunsuke/tfaction/get-global-config

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

4/10

Maintained action available

joutvhu/get-release

GitHub Action to get release

2/10

coveo/public-actions/audit-renovate-config

Regroup public GitHub Actions that can be reused in many of Coveo's repositories.

8/10

step-security/changeset-action

Secure drop-in replacement for changesets/action.

10/10

Maintained by StepSecurity

nolar/setup-k3d-k3s

Setup K3d/K3s for GitHub Actions

5/10

sil-org/ecs-deploy

Simple shell script for initiating blue-green deployments on Amazon EC2 Container Service (ECS)

5/10

Maintained action available

nstwfdev/docker-registry-image-cleaner

2/10

rapidsai/sccache/.github/actions/rust-toolchain

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

5/10

Maintained action available

containerbase/internal-tools

Renovate internal build tools

5/10

Maintained action available

nvidia-nemo/fw-ci-templates/send-slack-alert/.github/actions/send-slack-alert

CI/CD templates for NeMo-FW libraries

5/10

Maintained action available