Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/github-actions-ensure-sha-pinned-actions

A Github Action to ensure that actions are pinned to full length commit SHAs. Secure drop-in replacement for zgosalvez/github-actions-ensure-sha-pinned-actions.

10/10

Maintained by StepSecurity

sredevopsorg/haproxy/.github/actions/setup-vtest

HAProxy Load Balancer's development branch (mirror of git.haproxy.org)

2/10

ministryofjustice/laa-crime-equinity-historical-data/.github/actions/test-app-gradle

Provide view access to historical data from Equinity

7/10

reproio/terraform-j2md

create readable terraform plan as markdown text from json plan output

4/10

protocol/multiple-go-modules

2/10

broadsage/containers/.github/actions/docker-build

Primary source of truth for the Broadsage Container Images

5/10

step-security/ssh-key-action

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

10/10

Maintained by StepSecurity

pytorch/ao/test-infra/.github/actions/pull-docker-image

PyTorch native quantization and sparsity for training and inference

2/10

Maintained action available

tomasreyes/stale

Marks issues and pull requests that have not had recent interaction

3/10

Maintained action available

gjtorikian/gh-actions-lockfile

Generate and verify lockfiles for GitHub Actions dependencies.

2/10

pytorch/FBGEMM/test-infra/.github/actions/setup-binary-builds

FB (Facebook) + GEMM (General Matrix-Matrix Multiplication) - https://code.fb.com/ml-applications/fbgemm/

2/10

Maintained action available

ministryofjustice/laa-reusable-github-actions/.github/actions/helm-deploy

A collection of re-useable GitHub actions

7/10

siemens/wasm-micro-runtime/.github/actions/install-linux-sgx

WebAssembly Micro Runtime (WAMR)

7/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/wp-content/uploads/2018/10/TO_wow2018_1.jpg

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

neondatabase/paths-filter

Conditionally run actions based on files modified by PR, feature branch or pushed commits

2/10

tj-actions/verify-changed-files

:octocat: Github action to verify file changes that occur during the workflow execution.

7/10

srz-zumix/setup-infer

This action installs 📘 infer.

3/10

cargo-bins/release-pr

GitHub Action to create a release PR using cargo-release — soft deprecated: try release-plz instead!

3/10

Andrew-Chen-Wang/github-wiki-action

📖 GitHub Action to sync a folder to the GitHub wiki

4/10

benjefferies/branch-protection-bot

A bot tool to disable and re-enable "Include administrators" option in branch protection

3/10