Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/action-semantic-pull-request/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action that ensures that your PR title matches the Conventional Commits spec. Secure drop-in replacement for amannn/action-semantic-pull-request.

9/10

nvidia-rtx/godot/.github/actions/upload-artifact

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10

Maintained action available

oxidize-rb/actions/test-gem-build

4/10

step-security/snyk-actions/docker

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10

Maintained by StepSecurity

siemens/kas/.github/actions/perform-tests

Setup tool for bitbake based projects

7/10

docker/bake-action/subaction/%3c/public-layout.tsx

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10

Maintained action available

ministryofjustice/hmpps-github-shared-actions/.github/actions/security_npm_outdated

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10

yonasbsd/melange/melange-src/.github/actions/setup-bubblewrap

build APKs from source code

3/10

Maintained action available

bpmn-io/actions/setup

The github actions used by the bpmn-io team

2/10

coder/setup-imdisk-action

4/10

pndurette/gh-actions-auto-docs

A GitHub Action for generating GitHub Action Markdown documentation

4/10

chitranklabs/git-hygiene

The ultimate zero-dependency metadata validator for modern Git workflows. Enforce conventional commits, branch naming patterns, and PR titles with blazing-fast native Node.js performance.

7/10