Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/github-action-renovate-config-validator/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Actions for renovate-config-validator. Secure drop-in replacement for suzuki-shunsuke/github-action-renovate-config-validator.

10/10

n-vr/setup-platformio-action

This actions sets up PlatformIO for use in actions.

4/10

mdjahid11978-design/neon/.github/actions/run-python-test-set

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

2/10

veracode/uploadandscan-action

1/10

Maintained action available

step-integration-tests/auto-pdpr-test-15908-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

ministryofjustice/laa-maat-scheduled-tasks/.github/actions/slack-notify-composite-action

7/10

ethpandaops/assertoor-github-action

Reusable github action to poll assertoor test status

3/10

step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/secure-download-artifact

:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.

10/10

kong/dynamic-uses

Dynamically resolve and use another GitHub action

3/10

step-security/setup-msbuild

A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications. Secure drop-in replacement for microsoft/setup-msbuild.

8/10

Maintained by StepSecurity

lfreleng-actions/openssf-scorecard-summary-action

Generates step/summary output containing the report URL

6/10

azure/azure-sdk-actions

Github Actions repository leveraged by the Azure SDK team.

6/10

dbelyaev/action-checkstyle

Automatically enforce Java code standards in PRs with inline feedback. Powered by Checkstyle + reviewdog for seamless GitHub integration.

9/10

step-security/ghaction-upx/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for UPX, the Ultimate Packer for eXecutables. Secure drop-in replacement for crazy-max/ghaction-upx.

8/10

nrwl/last-successful-commit-action

GitHub action for identifying the last successful commit for a given workflow and branch.

1/10

gerrymanoim/pr-prefix-labeler

Automatically label your PRs based on the title prefix

1/10

kubb-labs/config/.github/fill

Configuration and tools for Kubb packages

6/10

stacklet/superset/.github/actions/cached-dependencies

Apache Superset is a Data Visualization and Data Exploration Platform

5/10

catnekaise/cognito-idpool-auth

Authenticate with Amazon Cognito Identity from GitHub Actions.

4/10

egibs/setup-chainctl

GitHub Action to install chainctl in your workflow

5/10