Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/setup-cocoapods/__builder_checkout_dir__/.github/actions/privacy-check

Set up your GitHub Actions workflow with a specific version of Cocoapods. Secure drop-in replacement for maxim-lobanov/setup-cocoapods.

9/10

tanker187/storybook/.github/actions/setup-node-and-install

Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation

4/10

aerospike/aerospike-client-java/.github/actions/publish-to-github

Aerospike Java Client Library

4/10

Maintained action available

antongolub/action-setup-bun

Setup GitHub Actions workflow with a specific version of Bun

2/10

mamba-org/setup-micromamba

GitHub Action to set up micromamba

5/10

step-security/action-golangci-lint

Run golangci-lint with reviewdog. Secure drop-in replacement for reviewdog/action-golangci-lint.

9/10

Maintained by StepSecurity

pytorch/extension-cpp/test-infra/.github/actions/chown-directory

C++ extensions in PyTorch

1/10

ministryofjustice/dso-modernisation-platform-automation/.github/actions/setup_oracle_target_access

Automation for DSO managed Modernisation Platform environments

6/10

tj-actions/github-changelog-generator

:octocat: Github action to generate CHANGELOG/HISTORY.md

3/10

grafana/grafana-github-actions-go/community-release

Grafana GitHub Actions in Golang

4/10

konradpabjan/move-labeled-or-milestoned-issue

3/10

hiero-ledger/hiero-did-sdk-js/.github/actions/setup-npm-env

A TypeScript/JavaScript SDK for building decentralized identity solutions on Hiero

5/10

Maintained action available

flatpak/flatpak-github-actions/flatpak-builder

Build your Flatpak application using Github Actions

3/10

orangelabs-moe/gradle-actions

Not maintained. Use https://github.com/actions/setup-java and https://github.com/gradle/gradle-build-action

4/10

coinbase/chainstorage/.github/workflows/setup

The File System For a Multi-Blockchain World

4/10

paddlehq/repo-file-sync-action

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.

3/10

step-security/setup-class-hash/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for making starknet-class-hash available in your workflows. Secure drop-in replacement for ericnordelo/setup-class-hash.

9/10

jupyterlab/maintainer-tools/.github/actions/check-links

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

8/10

crazy-max/image

Work with containers' images

3/10

ministryofjustice/hmpps-integration-api/.github/actions/policy-file-generator

A long-lived API that exposes data from HMPPS systems providing a single point of entry for consumers.

7/10