Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

protocolbuffers/protobuf-ci/sccache

A shared repository for Protobuf CI actions

4/10

falcosecurity/falco-actions/stop

Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD

6/10

pytorch/pytorch/.github/actions/download-td-artifacts

Tensors and Dynamic neural networks in Python with strong GPU acceleration

4/10

Maintained action available

chainguard-actions/reviewdog-action-actionlint

3/10

Maintained action available

scacap/action-ktlint

Run Ktlint with reviewdog

5/10

cheelim1/ecs-autoscaler

Github Action for ECS Autoscaling

8/10

sredevopsorg/metabase/.github/actions/e2e-prepare-containers

The simplest, fastest way to get business intelligence and analytics to everyone in your company :yum:

2/10

dustin4444/cds/.github/actions/get-merge-base

Coinbase Design System

2/10

prowler-cloud/prowler/.github/actions/setup-python-poetry

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

5/10

Maintained action available

nambers/replacestringinfile

3/10

fastlane/github-actions/fastlane-env-reminder

4/10

Maintained action available

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/karancode-yamllint-github-action

Mirror from https://github.com/karancode/yamllint-github-action

4/10

surrealdb/rocksdb/.github/actions/pre-steps-macos

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

step-security/sonarqube-github-c-cpp

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead. Secure drop-in replacement for sonarsource/sonarqube-github-c-cpp.

10/10

Maintained by StepSecurity

huntridge-labs/argus/.github/actions/scn-detector

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

step-security/setup-opentofu

Secure drop-in replacement for opentofu/setup-opentofu.

8/10

Maintained by StepSecurity

togethercomputer/together-python/.github/actions/poetry_setup

The Official Python Client for Together's API

3/10

layr-labs/security-shared-workflows/actions/codeql-scans

3/10

launchdarkly/java-core/.github/actions/publish-docs

LaunchDarkly monorepo for Java SDK packages

6/10

tomasreyes/maui/.github/actions/triage-ai

.NET MAUI is the .NET Multi-platform App UI, a framework for building native device applications spanning mobile, tablet, and desktop.

7/10