Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

surrealdb/surrealdb/.github/actions/quality-format

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

step-security/publish-unit-test-result-action/misc/action/json-output

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

8/10

Maintained by StepSecurity

maxnowack/local-cache

Github Action to provide caching data by placing a tarball on the local filesystem. Drop-in replacement for `actions/cache@v3`

2/10

caffeelake/localstack/.github/actions/setup-tests-env

💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline

1/10

mxcl/get-swift-version

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/viarise/setup-node

Fork of upstream: https://github.com/actions/setup-node

0/10

step-security/ghcr-cleanup-action

GitHub Container Registry Cleanup Action. Secure drop-in replacement for dataaxiom/ghcr-cleanup-action.

10/10

Maintained by StepSecurity

philips-software/amp-devcontainer/.github/actions/update-vscode-extensions

🔋amp-devcontainer is a batteries-included devcontainer useable for modern software development

7/10

yonasbsd/wazuh/.github/actions/public-layout.tsx

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

openzeppelin/ui-builder/.github/actions/public-layout.tsx

UI Builder is an open-source blockchain development tool that helps developers and non-developers create user-friendly interfaces for smart contract interaction by providing a chain-agnostic form builder that generates standalone "mini apps" without requiring backend infrastructure.

6/10

ledgerhq/ledger-live/tools/actions/composites/setup-git-user

Mono-repository for Ledger Wallet apps and related packages

4/10

Maintained action available

grafana/plugin-ci-workflows/actions/plugins/publish/check-artifacts

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

chainguard-actions/azure-setup-kubectl

3/10

Maintained action available

github/codeql-action/v3.23.2

Actions for running CodeQL analysis

8/10

09168806659/metaplex-program-library/.github/actions/get-pr-for-commit

Smart contracts maintained by the Metaplex team

2/10

ministryofjustice/laa-data-claims-reporting-service/.github/get_release_name

Java service to generate claims reports

8/10

alstr/todo-to-issue-action

Action that converts TODO comments to GitHub issues on push.

5/10

Maintained action available

nvidia/aicr/.github/actions/sbom-and-attest

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

6/10

testlabtools/predict

Predict CI results

4/10

ministryofjustice/github-actions/code-formatter

A collection of reusable GitHub Actions for the Ministry of Justice, designed to streamline and enhance workflows across our projects. • This repository is defined and managed in Terraform

6/10