Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

smallstep/action-install-step-cli

A GitHub Action to install step CLI on Linux and MacOS.

4/10

nvidia/sparkucx/.github/workflows/signoff-check

A high-performance, scalable and efficient ShuffleManager plugin for Apache Spark, utilizing UCX communication layer

3/10

pullpreview/action

A GitHub Action that starts preview deployments for your pull requests and branches. It can work with any application that has a valid Docker Compose file. Also supports Helm charts.

3/10

Maintained action available

coactions/setup-xvfb

Run your tests headlessly by enabling xvfb

6/10

gradle/actions/public-layout.tsx

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

6/10

action-pack/send-mail

Action to send an email.

3/10

Maintained action available

pandaswhocode/rootly-incident-action

Typescript action for creating rootly incidents (and alerts)

4/10

Maintained action available

actions/cache/save

Cache dependencies and build outputs in GitHub Actions

7/10

grafana/k6-extension-actions/setup-k6lint

Reusable composite GitHub actions to support k6 extension development.

4/10

step-security/mongodb-github-action

Use MongoDB in GitHub Actions. Secure drop-in replacement for supercharge/mongodb-github-action.

10/10

Maintained by StepSecurity

09168806659/metaplex-program-library/.github/actions/program/token-metadata-and-metaplex

Smart contracts maintained by the Metaplex team

2/10

yonasbsd/ribir/.github/actions/setup-gemini

Non-intrusive GUI framework for Rust/WASM

5/10

Maintained action available

codingjoe/word-weasel

Elevate your technical writing!

5/10

binary-install/setup-x

GitHub Action to install binaries using binstaller-generated scripts with verification

4/10

bytecodealliance/wasmtime/.github/actions/binary-compatible-builds

A lightweight WebAssembly runtime that is fast, secure, and standards-compliant

7/10

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/build_docker

Github actions for HMPPS projects

6/10

yonasbsd/buck2/.github/actions/setup_reindeer

Build system, successor to Buck

3/10

Maintained action available

step-security/protobuf-ci/ccache

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

dyladan/component-owners

Automatically add component owners as assignees and approvers to pull requests

2/10

gacts/purge-jsdelivr-cache

🚀 GitHub action for the jsDelivr cache purging

2/10