Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
eclipse-zenoh/ci/public-layout.tsx
GitHub Actions and workflows used across eclipse-zenoh
grafana/plugin-ci-workflows/actions/internal/plugins/setup
Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins
grafana/security-github-actions/trivy
Repo for Security related GitHub Actions CI automation
step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/compute-sha256
Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.
oxidecomputer/actions-rs_toolchain
๐ ๏ธ GitHub Action for `rustup` commands
step-security/action-semantic-demo
devantler-tech/ksail/.github/actions/ksail-cluster
All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.
grafana/x-ray-datasource/actions/commands
Grafana data source plugin for querying AWS X-Ray / AWS Application Signals
nv-gha-runners/setup-artifactory-go-proxy
selfxyz/self/.github/actions/check-nested-requires
Prove your self
navikt/automerge-dependabot
This action automatically merges pull requests created by Dependabot with a set of configurable rules.
step-security/add-pr-comment/_next/static/chunks/54511-223fffa5f06b2071.js
GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.
pytorch/torchrec/test-infra/.github/actions/setup-ssh
Pytorch domain library for recommendation systems
pandoc/actions/image
pytorch/executorch/test-infra/.github/actions/upload-artifact-s3
On-device AI across mobile, embedded and edge for PyTorch
red-gate/flyway-actions/migrations/deploy
Official Redgate Actions: Set up, check, and deploy changes with Redgate Flyway
grafana/mimir-loki/lib/actions/should-release
Like Prometheus, but for logs.
pi-top/git-debian-changelog-bump-action
yonasbsd/wazuh/.github/actions/vulnerability_scanner/compile
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
nvidia/cuda-quantum/.github/actions/run-in-docker
C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows