Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/github-actions-ensure-sha-pinned-actions/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A Github Action to ensure that actions are pinned to full length commit SHAs. Secure drop-in replacement for zgosalvez/github-actions-ensure-sha-pinned-actions.

10/10

oznu/gh-wiki-edit-discord-notification

GitHub Action to notify a Discord channel when someone edits the project wiki.

0/10

apecloud-inc/auto-approve-action

👍 GitHub Action for automatically approving GitHub pull requests

2/10

Vendic/magento2-google-address-autocomplete/.github/actions/setup

3/10

step-security/protobuf-ci/bash

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

broadsage-containers/docker-template/.github/actions/build-metadata

This template used to develop build logic for templating pipeline repositories

5/10

chainguard-images/actions/release-monitoring

GitHub actions for the chainguard-images

8/10

OpenElements/hedera-solo-action

A GitHub Action for setting up a Hiero based network for tests

6/10

PoliticalSphere/ci/.github/actions/build

CI/CD pipelines and GitHub Actions for Political Sphere

2/10

anysphere/cancel-workflow-action

⏹️ GitHub Action to cancel previous running workflows on push

3/10

holowinski/plantuml-github-action

PlantUML Github Action

3/10

momentohq/standards-and-practices/github-actions/shared-build

Information about how we organize, maintain, and release open source software at Momento

3/10

envoyproxy/toolshed/gh-actions/retest

7/10

actions/jekyll-build-pages

A simple GitHub Action for producing Jekyll build artifacts compatible with GitHub Pages.

7/10

chaos-mesh/chaos-mesh-actions

3/10

ministryofjustice/laa-maat-court-data-api/.github/actions/slack-notify-composite-action

This is an API to MAAT. It facilitates the communication between MAAT & Court Data.

8/10

guilhermetod/semantic-release-notes-preview

A GitHub Action for previewing the release notes that will be generated by a given pull request

3/10

dotnet/docs-tools/cleanrepo/CleanRepo

This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.

4/10

Maintained action available

fusion-engineering/setup-git-credentials

GitHub action to enable cloning private respositories.

3/10

neondatabase/autoscaling/.github/actions/deps-versions

Postgres vertical autoscaling in k8s

3/10