Assess the risk of third-party GitHub Actions

pytorch/multipy/.github/actions/setup-ssh

torch::deploy (multipy for non-torch uses) is a system that lets you get around the GIL problem by running multiple Python interpreters in a single C++ process.

1/10

qoomon/actions--setup-git

Setup Git config to be ready for git commit and push commands

ministryofjustice/hmpps-github-actions/.github/actions/slack_release_results

Github actions for HMPPS projects

6/10

pytorch/tensordict/test-infra/.github/actions/calculate-docker-image

TensorDict is a pytorch dedicated tensor container.

jeertmans/filesfinder

Find files matching patterns while respecting .gitignore

codepunkt/npm-lockfile-changes

Creates PR comments with a human-readable summaries of NPM lockfile changes.

2/10

ryand56/r2-upload-action

GitHub Action to upload files or directories to a Cloudflare R2 bucket (or another S3 compatible API), built on top of @aws-sdk/client-s3 in TypeScript.

5/10

hyperledger/indy-shared-gha/.github/actions/workflow-setup

step-security/gh-docker-logs/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

GitHub Action to collect logs from all docker containers. Secure drop-in replacement for jwalton/gh-docker-logs.

10/10

coveo/stew/.github/workflows/actions/stew-ci

Complete Python CI/CD solution built around Poetry.

5/10

snapcore/action-publish

A Github action for publishing snaps

magdemajt/trigger-webhook

Github actions flow to send POST HTTP request

yonasBSD/codeql/.github/actions/os-version

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

step-security/release-on-push-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Github Action to create a git tag + release when pushed to master. Secure drop-in replacement for rymndhng/release-on-push-action.

10/10

mogeko/latest-version

A GitHub Action that checks and outputs the latest version of the specified repo.

2/10

pytorch/audio/test-infra/.github/actions/calculate-docker-image

Data manipulation and transformation for audio signal processing, powered by PyTorch

coveord/snowpark-java-scala/whitesource-actions/snyk-pr

Snowflake Snowpark Java & Scala API

rolfbjarne/autoformat

GitHub Action to automatically format source code in pull requests