Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
yonasbsd/buck2/.github/actions/build_bootstrap
Build system, successor to Buck
johnbeynon/render-deploy-action
A Github Action for trigging a deploy of a Render service.
step-security/r-lib-actions/null
GitHub Actions for the R community. Secure drop-in replacement for r-lib/actions.
celestiaorg/.github/.github/actions/fill
githubsecuritylab/actions-permissions/advisor
GitHub token permissions Monitor and Advisor actions
kong/slsa-generator/__builder_checkout_dir__/.github/actions/compute-sha256
Language-agnostic SLSA provenance generation for Github Actions
bazel-contrib/setup-bazel
GitHub Action to configure Bazel
laminas/documentation-theme/github-actions/public-layout.tsx
Documentation theme for Laminas and Mezzio
microsoft/devskim-action
The GitHub Action for DevSkim
datadog/integrations-core/core-temp/.github/actions/setup-test-target-scripts
Core integrations of the Datadog Agent
ledgerhq/ledger-live/tools/actions/composites/aggregate-shard-results
Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.
nv-gha-runners/cuda-python/.github/actions/install_unix_deps
CUDA Python: Performance meets Productivity
grafana/grafana-github-actions-go/bump-release
Grafana GitHub Actions in Golang
stefreak/ossf-scorecard-repro-2189/.github/actions/image
Reproduce bug https://github.com/ossf/scorecard/issues/2189
sonarsource/release-github-actions/get-jira-release-notes
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.
fallow-rs/fallow
Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.
pytorch/pytorch.github.io/test-infra/.github/actions/export-matrix-variables
The website for PyTorch
step-security/protobuf-ci/null
A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.
domblack/github-release
Github Action to create, update, or add files to Github Releases