Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia-nemo/evaluator/fw-ci-templates/.github/actions/publish-docs

Open-source library for scalable, reproducible evaluation of AI models and benchmarks.

7/10

siku2/action-hosting-deploy

2/10

requarks/changelog-action

GitHub Action to generate changelog from conventional commits

3/10

gregclermont/actions-permissions/image

GitHub token permissions Monitor and Advisor actions

2/10

philips-software/sbom-tool-installer-action

GitHub Action that installs and sets up the Microsoft SBOM Tool.

3/10

step-security/protobuf-ci/../../_actions/current/internal/repository-cache-save

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

chromaui/action-next

Next version of chromaui/action (this repository is publish only)

5/10

Maintained action available

regclient/actions/fill

7/10

taiki-e/cache-cargo-install-action

GitHub Action for `cargo install` with cache.

8/10

opcr-io/policy-tag-action

policy-tag-action

3/10

step-security/create-a-file-action

A github action to create a file in your github workflow. Secure drop-in replacement for 1arp/create-a-file-action.

10/10

grafana/grafana/_shared-workflows-dockerhub-login/actions/get-vault-secrets

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

4/10

Maintained action available

hpcodecraft/action-deploy-workspace-to-repo

Github action to copy files generated during a workflow run to an external repository

2/10

the-wright-jamie/update-pr-info-action

A GitHub Action that updates a pull request with information extracted from the head and/or base branch name

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/poseidon-wait-for-status-checks

Mirror from https://github.com/poseidon/wait-for-status-checks

1/10

Maintained action available

fastly/compute-actions/build

GitHub Actions for building on Fastly Compute.

7/10

pravipati-sandbox/codeql-action/analyze

Actions for running CodeQL analysis

2/10

step-security/auto-assign-action/__builder_checkout_dir__/.github/actions/privacy-check

An action which adds reviewers to the pull request when the pull request is opened. Secure drop-in replacement for kentaro-m/auto-assign-action.

9/10

oxidize-rb/actions/cross-gem

4/10

ljharb/actions/vlt/install

GitHub actions I use for CI.

5/10

Maintained action available