Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
lcarva/review-rot-action/run
GitHub actions for review-rot
ministryofjustice/hmpps-community-payback-ui/.github/actions/slack_failure_notification
UI for community payback (bootstrapped 2025-08-15)
suzuki-shunsuke/github-action-renovate-config-validator
GitHub Actions for renovate-config-validator
jasonn3/build-container-installer
Creates an ISO for installing a container image as an OS
kritsanan1/attest-build-provenance
Action for generating build provenance attestations for workflow artifacts
yonasbsd/neon/.github/actions/image
Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.
dsanders11/project-actions/copy-project
A collection of actions for automating GitHub projects
triaxtec/github-actions/python/public-layout.tsx
A collection of reusable actions used in our projects
sailpoint-oss/github-spectral-action
A Github Action that will take in the changed files from a pull request and create a error report as a comment on the PR.
stuyarrow/publish-release
Github action to publish a draft release
step-security/create-or-update-comment/__builder_checkout_dir__/.github/actions/privacy-check
A GitHub action to create or update an issue or pull request comment. Secure drop-in replacement for peter-evans/create-or-update-comment.
bridgecrewio/bridgecrew-action
This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.
step-security/terraform-cloud-provider-publish/__builder_checkout_dir__/.github/actions/fill
An action for publishing terraform providers to a private registry. Secure drop-in replacement for thechrisjohnson/terraform-cloud-provider-publish.
launchdarkly/roku-client-sdk/.github/actions/publish
LaunchDarkly Client-side SDK for Roku (Brightscript)
superfly/flyctl-actions
:octocat: GitHub Action that wraps the flyctl
aabed/slack-file-upload-action
This action uploads file to slack
step-security/snyk-actions/python
A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.
port-labs/ocean-sail
pandaswhocode/initialize-github-job
Common steps for initializing a job for GitHub actions
jofthev/docs/.github/actions/precompute-pageinfo
The open-source repo for docs.github.com