Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
fluxcd/pkg/actions/kustomize
GitOps Toolkit Go SDK
step-security/action-create-tag/__builder_checkout_dir__/.github/actions/privacy-check
Simple GitHub action that can be used to create a tag inside a GitHub action. Secure drop-in replacement for rickstaa/action-create-tag.
sonarsource/ci-github-actions/pr_cleanup
CI/CD GitHub Actions
ministryofjustice/money-to-prisoners-start-page/.github/actions/fill
GOV.UK start page for Money to Prisoners
yokawasa/action-sqlcheck
A GitHub Action that automatically identifies anti-patterns in SQL queries using sqlcheck when PR is requested. Please [✩Star] if you're using it!
lfreleng-actions/gerrit-review-action
GitHub Action for doing reviews on Gerrit systems
caffeelake/zed/.github/actions/check_style
Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.
ledgerhq/ledger-live/tools/actions/change-product-name
Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.
step-security/add-pr-comment/_next/static/chunks/87511-ea4d82de8f16d6ee.js
GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.
grafana/shared-workflows/shared-workflows/actions/login-to-gar
A public-facing, centralized place to store reusable workflows used by Grafana Labs.
zingdevlimited/actions-helpers/update-flex-config
Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks.
dawidd6/action-get-tag
:gear: A GitHub Action to get the pushed tag name
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-slack-notification
A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)
ministryofjustice/payforlegalaid-openapi/.github/build
launchdarkly/java-core/.github/actions/publish
LaunchDarkly monorepo for Java SDK packages
pytorch/pytorch/test-infra/.github/actions/export-matrix-variables
Tensors and Dynamic neural networks in Python with strong GPU acceleration
step-security/nothing-but-nix/__builder_checkout_dir__/.github/actions/public-layout.tsx
Create a 130GB Nix ️store in GitHub runners ❄️ Multi-partition BTRFS RAID-0 for /nix 💪 Brutally purges unnecessary software 🪓 Dynamically grows the Nix store 📈. Secure drop-in replacement for wimpysworld/nothing-but-nix.
equinor/lighthouse-client/.github/actions/pnpm-setup
WebClient for project Lighthouse
vendic/magento2-sentry-exclude-errors-regex/.github/actions/setup
Package for excluding errors from sentry using regex in env.php