Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

smartcontractkit/chainlink-solana/.github/actions/build_contract_artifacts

5/10

Maintained action available

step-security/trigger-workflow-and-wait/__builder_checkout_dir__/.github/actions/privacy-check

Trigger a workflow in another (or same) repository and wait for the job to finish. Secure drop-in replacement for convictional/trigger-workflow-and-wait.

10/10

aerospike/aerospike-client-go/.github/actions/deploy-aerolab

Aerospike Client Go

5/10

Maintained action available

step-security/ghaction-import-gpg/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to import a GPG key. Secure drop-in replacement for crazy-max/ghaction-import-gpg.

9/10

nvidia/transformerengine/.github/actions/build-pytorch-wheel

A library for accelerating Transformer models on NVIDIA GPUs, including using 8-bit and 4-bit floating point (FP8 and FP4) precision on Hopper, Ada and Blackwell GPUs, to provide better performance with lower memory utilization in both training and inference.

6/10

supabase/embeddings-generator

GitHub Action to generate embeddings from the markdown files in your repository.

3/10

ai-dynamo/dynamo/.github/actions/builder-refresher

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

docker/bake-action/subaction/list-targets/b1j7n2

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10

Maintained action available

mdeweerd/logtocheckstyle

Github Annotations from a regular textual log, or convert to CheckStyle xml output

2/10

dotnet/versionsweeper

🎯 LTS (or current) versions - GitHub Action that will run as a scheduled CRON job. Ideally, once every few months or as often as necessary to align with .NET version updates.

7/10