Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

chainguard-images/actions/apko-publish

GitHub actions for the chainguard-images

8/10

zdurham/s3-upload-github-action

Upload github action for sending files to s3

3/10

xt0rted/stylelint-problem-matcher

A GitHub Action that registers a problem matcher for Stylelint's report format

2/10

sonarsource/sonar-scanner-maven/.github/actions/orchestrator-cache

SonarQube Scanner for Maven

7/10

step-security/setup-yq/__builder_checkout_dir__/.github/actions/secure-download-artifact

Sets up YQ, yet-another-markup-language-query-er, for use in your Github Actions workflow. Secure drop-in replacement for chrisdickinson/setup-yq.

9/10

ministryofjustice/laa-data-access-api/.github/actions/cleanup_branch

6/10

chick-fil-a/gha-docker-run

A GitHub Action to run a docker container with current workspace mapped and github actions env vars available.

2/10

mcdonnnj/actions-permissions/monitor

GitHub token permissions Monitor and Advisor actions

2/10

eliheady/dnscontrol-action-experimental

4/10

devantler-tech/actions/sync-github-labels

Actions designed to streamline CI/CD processes.

5/10

Maintained action available

step-security/install-jq-action

Multiplatform jq installer action. Secure drop-in replacement for dcarbone/install-jq-action.

10/10

Maintained by StepSecurity

step-security/ssh-key-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

10/10

argoproj/argo-rollouts/__builder_checkout_dir__/.github/actions/privacy-check

Progressive Delivery for Kubernetes

5/10

Maintained action available

jbutcher5/read-yaml

A GitHub Action to read yaml files.

3/10

cx-ciso/ast-github-action

Checkmarx application security testing (AST) GitHub action

3/10

matlab-actions/run-tests

Run MATLAB and Simulink tests and generate artifacts.

8/10

abronin/ecr-retag-action

:octocat: GitHub Action to retag existing Docker image in AWS ECR

2/10

ministryofjustice/opg-reports/.github/actions/terraform

Development repository: Managed by opg-org-infra & Terraform

7/10

nvidia/aicr/.github/actions/go-test

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

commit-check/commit-check-action

Commit Check GitHub Action

6/10