Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mfem/github-actions/build-metis

One repo for all mfem GitHub Actions

4/10

saxena-dev/nautilus_trader/.github/actions/fill

A high-performance algorithmic trading platform and event-driven backtester

7/10

step-integration-tests/auto-pdpr-test-98184-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sasobadovinac/gitnexus/.github/actions/setup-gitnexus-web

GitNexus: The Zero-Server Code Intelligence Engine - GitNexus is a client-side knowledge graph creator that runs entirely in your browser. Drop in a GitHub repo or ZIP file, and get an interactive knowledge graph wit a built in Graph RAG Agent. Perfect for code exploration

2/10

warpbuilds/docker-configure

Sets up WarpBuild's Remote Docker Builders in workflows

1/10

hiero-ledger/hiero-ethereum-execution-spec-tests/.github/actions/build-evm-client/besu

Specification for the Execution Layer. Tracking network upgrades.

7/10

nautechsystems/nautilus_trader/.github/actions/fill

Production-grade Rust-native trading engine with deterministic event-driven architecture

8/10

step-security/github-action-get-latest-release/__builder_checkout_dir__/.github/actions/public-layout.tsx

A Github action to get the latest release from another repository. Secure drop-in replacement for pozetroninc/github-action-get-latest-release.

10/10

sonarsource/sonar-rust/gh-action_release/public-layout.tsx

Plugin for Rust language

4/10

Maintained action available

step-security/setup-buildx-action/_next/static/chunks/59146-5ad79f2f6400fda1.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

9/10

espressif/github-actions/upload_components

Github Actions developed/used by Espressif

0/10

finaljrad-ir/fish-shell/.github/actions/rust-toolchain

The user-friendly command line shell.

3/10

mathieusoysal/file-updater-for-release

Update automatically the old version in your readme (or other files) with your new tag version.

4/10

step-security/action-setup/__builder_checkout_dir__/.github/actions/secure-download-artifact

Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.

10/10

necojackarc/auto-request-review

A GitHub Action that automatically requests review of a pull request based on files changes and/or groups the author belongs to 🤖

5/10

Maintained action available

pytorch/test-infra/.github/actions/upload-artifact-s3

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

2/10

Maintained action available

axios/bundle-size

GitHub Action for comparing built artifact gzip bundle sizes against npm release baselines, with JSON reports and optional PR comments.

6/10

step-security/setup-buildx-action/_next/static/chunks/app/layout-36884a1483c21d48.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

9/10

step-integration-tests/auto-pdpr-test-79982-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

coursier/cache-action

GitHub action to save / restore the coursier cache of your build

6/10