Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

juliangruber/merge-pull-request-action

A simple GitHub Action for merging pull requests

1/10

sredevopsorg/nhost/.github/actions/install-dependencies

The Open Source Firebase Alternative with GraphQL.

3/10

step-security/rust-cache/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

A GitHub Action that implements smart caching for rust/cargo projects. Secure drop-in replacement for Swatinem/rust-cache.

10/10

hugoheml/update_release

This GitHub Action (written in JavaScript) is to change the Body Text and Name of an already created Release with using the GitHub Release API.

2/10

grafana/mimir-loki/actions/metrics-collector

Like Prometheus, but for logs.

3/10

AndreMiras/coveralls-python-action

GitHub Action for Python Coveralls.io

4/10

step-security/setup-bun/.github/actions/compare-bun-version

Set up your GitHub Actions workflow with a specific version of Bun. Secure drop-in replacement for oven-sh/setup-bun.

10/10

step-security/release-notes-generator-action/__BUILDER_CHECKOUT_DIR__/.github/actions/compute-sha256

Action to auto generate a release note based on your events. Secure drop-in replacement for Decathlon/release-notes-generator-action.

10/10

ZedThree/clang-tidy-review/upload

Create a pull request review based on clang-tidy warnings

5/10

Maintained action available

elastic/oblt-actions/pre-commit

7/10

lost-pixel/lost-pixel

Open source alternative to Percy, Chromatic, Applitools.

3/10

unionai/flytectl-setup-action

Install and setup flytectl for use in other actions

2/10

little-core-labs/install-terraform

Install terraform to the current GitHub Actions job

3/10

openapi-generators/openapitools-generator-action

Generate a client library using the OpenAPITools Generator

3/10

pre-commit/action

a GitHub action to run `pre-commit`

7/10

sett-and-hive/sarif-to-issue-action

A GitHub action for @security-alert/sarif-to-issue

5/10

dcarbone/install-yq-action

Install YQ into the action tool cache without needing nodejs

5/10

actions/create-release

An Action to create releases via the GitHub Release API

6/10

pytorch/TensorRT/test-infra/.github/actions/setup-ssh

PyTorch/TorchScript/FX compiler for NVIDIA GPUs using TensorRT

3/10

Maintained action available

honeycombio/oss-management-actions/labels

A set of GitHub Actions to apply a common set of OSS management workflows to Honeycomb projects.

4/10