Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

Johnabell/absinthe_field_telemetry

A library for analysing absinthe GraphQL runtime usage

6/10

PoliticalSphere/ci/.github/actions/ps-lint-tools

CI/CD pipelines and GitHub Actions for Political Sphere

2/10

slsa-framework/slsa-github-generator/actions/nodejs/publish

Language-agnostic SLSA provenance generation for Github Actions

4/10

ksivamuthu/actions-setup-gh-cli

Actions to setup gh cli

3/10

balena-io/deploy-to-balena-action

Official Github action to deploy releases to balenaCloud environments

3/10

Maintained action available

yonasBSD/fish-shell/.github/actions/install-sphinx

The user-friendly command line shell.

5/10

Maintained action available

step-security/skip-duplicate-actions/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Save time and cost when using GitHub Actions. Secure drop-in replacement for fkirc/skip-duplicate-actions.

10/10

zulip/github-actions-zulip/send-message

A collection of GitHub Actions to interact with Zulip.

3/10

MaxDesiatov/swift-windows-action

GitHub Action for building and testing your code with Swift on Windows

3/10

UpsideDownST/engpr

2/10

chainguard-dev/actions/matrix-extra-inputs

A collection of reusable Github Actions workflows.

8/10

azure/k8s-deploy

GitHub Action for deploying to Kubernetes clusters

8/10

actions/attest-build-provenance/predicate

Action for generating build provenance attestations for workflow artifacts

7/10

ataylorme/eslint-annotate-action

A GitHub action that takes ESLint results from a JSON file and adds them as annotated pull request comments

3/10

MetaMask/cla-signature-bot

GitHub Action for self-contained handling of CLA signatures

3/10

grafana/plugin-ci-workflows/actions/plugins/version-bump

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

5/10

Maintained action available

GoogleCloudPlatform/github-actions/setup-gcloud

A GitHub Action for installing and configuring the gcloud CLI.

6/10

pytorch/ao/test-infra/.github/actions/setup-ssh

PyTorch native quantization and sparsity for training and inference

2/10

Maintained action available

zerodaysec/github-action-for-python

5/10

Maintained action available

deriv-com/shared-actions/.github/actions/post_preview_build_comment

This repository is dedicated to hosting reusable GitHub Actions YAML files that can be shared across different repositories.

4/10

Maintained action available