Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

yonasbsd/joplin/.github/workflows/shared/setup-build-environment

Joplin - an open source note taking and to-do application with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.

4/10

Maintained action available

elide-tools/setup-llvm

A GitHub Action for downloading and installing LLVM and Clang binaries.

2/10

takaishi/tfclean

tfclean is tool to remove applied moved block, import block, etc

5/10

Maintained action available

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-json/oembed/1.0/embed/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

agslima/app-stayhealthy-pipeline/.github/actions/resolve-run-metadata

Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.

7/10

cilium/workflow-telemetry-action

Github action to collect metrics (job, step completion time) from your workflows to help you debug and optimize your CI/CD pipeline

3/10

timschoenle/actions/actions/common/setup-app-git-identity

Centralized collection of reusable GitHub Actions, Workflows, and configurations.

7/10

step-security/otel-cicd-action/__builder_checkout_dir__/.github/actions/privacy-check

Open Telemetry CI/CD Action. Secure drop-in replacement for corentinmusard/otel-cicd-action.

10/10

fregante/setup-git-token

GitHub Action that sets the GITHUB_TOKEN as credentials for git (enables `git push`)

2/10

grafana/prometheus/.github/promci/actions/publish_release

The Prometheus monitoring system and time series database.

4/10

vendic/magento2-offline-payments/.github/actions/setup

Magento 2 Offline Payment methods (Cash and Prepaid)

2/10

joshjohanning/approveops

GitHub Action for Approvals in IssueOps (ChatOps)

4/10

Maintained action available

yonasbsd/renovate/.github/actions/setup-node

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

4/10

Maintained action available

ministryofjustice/modernisation-platform-github-actions/terraform-static-analysis

A collection of reusable GitHub Actions for the Modernisation Platform, designed to streamline and enhance workflows across our projects. This repository is defined and managed in Terraform. • This repository is defined and managed in Terraform

8/10

ledgerhq/ledger-live/tools/actions/composites/image

Mono-repository for packages related to Ledger Live and its JavaScript ecosystem.

4/10

Maintained action available

alepee/calendar-version-action

2/10

settlemint/setup-op

Github action to install the 1Password CLI

3/10

Maintained action available

pragatheeswarans/yarn-audit-action

To run yarn audit command for your project via Github actions and create a Github issue if high severity issues are found

0/10

yonasbsd/zed/.github/actions/check_style

Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

2/10

Maintained action available

step-security/actions-gh-pages

GitHub Actions for GitHub Pages 🚀 Deploy static files and publish your site easily. Static-Site-Generators-friendly. Secure drop-in replacement for peaceiris/actions-gh-pages.

10/10

Maintained by StepSecurity