Assess the risk of third-party GitHub Actions

step-security/action-github-changelog-generator/__builder_checkout_dir__/.github/actions/privacy-check

✏️ Automatically generate change log from your tags, issues, labels and pull requests on GitHub. Secure drop-in replacement for janheinrichmerker/action-github-changelog-generator.

octopusdeploy/push-build-information-action

| Public | :octocat: GitHub Action to Push Build Information to Octopus Deploy

6/10

envoyproxy/toolshed/actions/github/env/fill

7/10

angular/dev-infra/github-actions/browserstack

Angular Development Infrastructure

6/10

step-security/kubepug-installer/__builder_checkout_dir__/.github/actions/secure-download-artifact

kubepug-installer GitHub Action. Secure drop-in replacement for kubepug/kubepug-installer.

launchdarkly/swift-eventsource/.github/actions/publish

Server-sent events (SSE) client implementation in Swift for iOS, macOS, tvOS, and watchOS

step-security/pr-name-enforcer

Secure drop-in replacement for dekinderfiets/pr-name-enforcer.

Maintained by StepSecurity

step-security/release-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

An action which manages a github release. Secure drop-in replacement for ncipollo/release-action.

calendulish/purge-artifacts-action

Action responsible for deleting old artifacts by setting expire duration.

3/10

rudderlabs/terraform-provider-rudderstack/.github/actions/import-gpg

nvidia/tilus/.github/actions/setup-environment

Tilus is a tile-level kernel programming language with explicit control over shared memory and registers.

step-integration-tests/auto-pdpr-test-98147-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

defenseunicorns/setup-uds

GitHub Action for Installing and Configuring UDS CLI

6/10

cringdahl/sharepoint-file-upload-action

Uploads one or more files (via glob) to Sharepoint site.

2/10

step-security/zingdevlimited-actions-helpers/install-library-flex-plugin

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks. Secure drop-in replacement for zingdevlimited/actions-helpers.

Maintained by StepSecurity

rudderlabs/terraform-provider-rudderstack/.github/actions/image

mathieusoysal/hiden-dependency-updater

Update automatically dependency that Dependabot can't check.

timschoenle/actions/actions/test/setup-e2e

Composite and Node GitHub Actions, reusable workflows and shared Renovate presets, each released under its own tag.

7/10

sonarsource/sonar-rust/gh-action_release/main

Plugin for Rust language