Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
ytanikin/pr-conventional-commits
lgtm-hq/lgtm-ci/.github/actions/calculate-version
Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions
step-security/trinodb-github-actions/sidebar.tsx
Github actions used in the Trino project. Secure drop-in replacement for trinodb/github-actions.
step-security/dynamodb-actions
Integrate Github Action with Amazon DynamoDB. Secure drop-in replacement for mooyoul/dynamodb-actions.
step-integration-tests/auto-pdpr-test-48686-15/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
cloudposse/actions/github/fill
Our Library of GitHub Actions
ministryofjustice/devsecops-actions/sca/dependencies
A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.
neondatabase/neon/.github/actions/public-layout.tsx
Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.
super-linter/super-linter/slim
Combination of multiple linters to run as a GitHub Action or standalone
vvakame/github-actions/welcome-comment
aerospike/aerospike-client-java/.github/actions/publish-to-jfrog
Aerospike Java Client Library
golangci/golangci-lint-action
Official GitHub Action for golangci-lint from its authors
gittools/gitversion/.github/actions/image
From git log to SemVer in no time
op5dev/prompt-ai
AI inference request GitHub Models via this GitHub Action.
step-integration-tests/auto-pdpr-test-57545-12/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
advanced-security/sarif-toolkit/relativepaths
All things SARIF, as an Action
sonatype/actions/setup-iq-cli%40v1
Public repository to keep Sonatype's GitHub Actions.
elastic/elastic-otel-python/.github/actions/env-install
spotdemo4/bumper
git semantic version conventional commit bumper
step-security/task-completed-checker-action
:ballot_box_with_check: A GitHub action that checks if all tasks are completed in the pull requests. Secure drop-in replacement for kentaro-m/task-completed-checker-action.