Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/allcheckspassed/__builder_checkout_dir__/.github/actions/privacy-check
GitHub Action to confirm that all checks reported on a commit have passed. Secure drop-in replacement for wechuli/allcheckspassed.
sozercan/kaito/.github/actions/fill
Kubernetes AI Toolchain Operator
step-integration-tests/auto-pdpr-test-42825-11/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
anthonyharrison/sbom4python
A tool to generate a SBOM (Software Bill of Materials) for an installed Python module
rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem-ci-result
Rstack Ecosystem CI
pre-commit/pre-commit-hooks
Some out-of-the-box hooks for pre-commit
nvidia/megatron-lm/.github/actions/check-nvidia-sso-membership
Ongoing research training transformer models at scale
edera-dev/actions/configure-azure-sccache
Shared GitHub Actions Repo
step-integration-tests/auto-pdpr-test-61350-1/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
kong/slsa-generator/__builder_checkout_dir__/.github/actions/generate-attestations
Language-agnostic SLSA provenance generation for Github Actions
yaoyorozu-hi/sekisho
้ขๆ โ hardened release gate for tsukai-mcp Rust crates: a minimal, audited, SHA-pinned reusable publish workflow (crates.io Trusted Publishing via OIDC).
aerospike/aerospike-client-go/.github/actions/single-node-sc-cluster
Aerospike Client Go
step-integration-tests/auto-pdpr-test-61883-14/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
tomasreyes/kafka/.github/actions/gh-api-approve-run
Mirror of Apache Kafka
abatilo/release-info-action
Get the latest release of some GitHub repository
m-s-abeer/update-gha-summary-with-workflow-inputs
This A GitHub Action that automatically creates a formatted table of all workflow_dispatch input parameters in your workflow summary.
yorifuji/easy-vrt/fill
GitHub Action that simplifies visual regression testing by providing a workflow template
wendbv/calver-tag-action
checkmarx/dustilock
DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.
step-security/run-vcpkg/__builder_checkout_dir__/.github/actions/secure-download-artifact
The GitHub Action to setup vcpkg for your C++ based projects. Stores built ports using Binary Caching backed onto GH Cache. Secure drop-in replacement for lukka/run-vcpkg.