Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

firedancer-io/firedancer/.github/actions/cpusonline

Firedancer is Jump Crypto's Solana validator software.

5/10

Maintained action available

softprops/action-gh-release/_next/static/chunks/webpack-30ad75d8c88f588e.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10

Maintained action available

algesten/snowflake

2/10

step-security/linkinator-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action that checks your README and other markdown for 404s. Secure drop-in replacement for JustinBeckwith/linkinator-action.

8/10

step-security/wait-on-action/__builder_checkout_dir__/.github/actions/fill

A GitHub Action variant of the wait-on package (npmjs.com/package/wait-on). Secure drop-in replacement for iFaxity/wait-on-action.

8/10

peternied/check-pull-request-description-checklist

GitHub action ensuring that pull requests have a description

3/10

pytorch/tensordict/test-infra/.github/actions/setup-miniconda

TensorDict is a pytorch dedicated tensor container.

4/10

Maintained action available

grafana/plugin-actions/package-manager-detect

8/10

dustin4444/slsa-github-generator/__builder_checkout_dir__/.github/actions/sign-attestations

Language-agnostic SLSA provenance generation for Github Actions

3/10

launchdarkly/swift-eventsource/.github/actions/lint

Server-sent events (SSE) client implementation in Swift for iOS, macOS, tvOS, and watchOS

5/10

sonarsource/sonar-analyzer-commons/.actions/config-maven

Logic useful for a language plugin

8/10

dariocurr/checkout-called

checkout the called repository at the same ref it was called

6/10

darwinia-network/devops/actions/smart-vercel

2/10

vuetorrent/release-to-discord

JS github action to send release body to Discord using a webhook

0/10

grafana/shared-workflows/_shared-workflows-trigger-argo-workflow/actions/fill

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

7/10

google-github-actions/setup-gcloud

A GitHub Action for installing and configuring the gcloud CLI.

6/10

benjule/bambustudio/.github/actions/get-version

BambuStudio fork with Linux packaging (AppImage, .deb, .rpm, Flatpak), CI/CD improvements and security hardening

5/10

tanker187/terraform/.github/actions/equivalence-test

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

2/10

Maintained action available

step-security/setup-buildx-action/_next/static/chunks/app/(dashboard)/not-found-78ffcd161e5e6323.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

ministryofjustice/laa-manage-your-civil-cases/.github/actions/reusable-playwright-steps

A service to centrally manage civil legal aid cases for the Legal Aid Agency

7/10