Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia/nemoclaw/.github/actions/ci-static-checks

Run agents like Hermes and OpenClaw more securely inside NVIDIA OpenShell with managed inference

4/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/create_app_version

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

4/10

launchdarkly/go-server-sdk-firestore/.github/actions/coverage

Firestore integration for the LaunchDarkly SDK for Server-side Go

5/10

Maintained action available

ledgerhq/ledger-live/tools/actions/composites/adjust-changeset-level

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

bbeesley/gha-auto-dependabot-rebase

Github Action to automatically request dependabot rebases

5/10

Maintained action available

balazsorban44/nissuer

A GitHub Action for tried and tired maintainers.

2/10

puneetmatharu/cmake-format-lint-action

A Github Action to format CMake-specific files using cmake-format.

4/10

ritik-deriv/ritik-test-poc/.github/actions/build

2/10

nvidia-isaac/gr00t-leapp-export/.github/actions/setup-venv

Adds export scripts to the gr00t official gr00t repo.

5/10

immich-app/devtools/actions/use-mise

Various tooling used by the Immich maintainer team

6/10

catfishheads-site/node/.github/actions/install-clang

Node.js JavaScript runtime ✨🐢🚀✨

4/10

Maintained action available

step-security/gha-setup-swift

Setup Swift (on Windows) on GitHub Actions Builders. Secure drop-in replacement for compnerd/gha-setup-swift.

10/10

Maintained by StepSecurity

launchdarkly/php-server-sdk-redis-phpredis/.github/actions/ci

Redis integration for the LaunchDarkly SDK for Server-side PHP using phpredis

5/10

eos-technologies/gitleaks-action-for-dirs

Protect your secrets using Gitleaks-Action

0/10

felixfbecker/issue-label-notification-action

An action to notify individuals or teams when specific labels are added to an issue.

0/10

oasdiff/oasdiff-action

GitHub action for comparing and detect breaking changes in OpenAPI specs

6/10

google-github-actions/release-please-action

Archived version of release-please

6/10

dmptrluke/django-csp-helpers/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

A set of mixins (and template tags) to assist in building CSP nonce-enabled websites.

5/10

Maintained action available

step-security/reviewdog-action-setup

🐶 Setup reviewdog action. Secure drop-in replacement for reviewdog/action-setup.

10/10

Maintained by StepSecurity

lets-cli/lets-action

Github action to setup lets task runner

2/10