Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-48086-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

yonasbsd/ghost/.github/actions/load-docker-image

Independent technology for modern publishing, memberships, subscriptions and newsletters.

5/10

Maintained action available

devsectop/tf-via-pr

Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.

6/10

step-security/nothing-but-nix/.github/actions/this

Create a 130GB Nix ️store in GitHub runners ❄️ Multi-partition BTRFS RAID-0 for /nix 💪 Brutally purges unnecessary software 🪓 Dynamically grows the Nix store 📈. Secure drop-in replacement for wimpysworld/nothing-but-nix.

10/10

step-security/gitleaks-action/__builder_checkout_dir__/.github/actions/privacy-check

Protect your secrets using Gitleaks-Action. Secure drop-in replacement for gitleaks/gitleaks-action.

10/10

chromaui/action

GitHub Action for publishing your Storybook to Chromatic

7/10

smartcontractkit/.github/actions/codeowners-review-analysis

reusable GHA workflows and actions

5/10

Maintained action available

jaywcjlove/markdown-to-html-cli

Command line tool that converts markdown to HTML.

4/10

hashicorp/setup-hc-releases

6/10

ministryofjustice/laa-data-claims-reporting-service/.github/deploy

Java service to generate claims reports

8/10

pytorch/pytorch/.github/actions/setup-rocm

Tensors and Dynamic neural networks in Python with strong GPU acceleration

5/10

Maintained action available

neondatabase/dev-actions/release-pr

3/10

step-security/release-drafter/__builder_checkout_dir__/.github/actions/secure-download-artifact

Drafts your next release notes as pull requests are merged into master. Secure drop-in replacement for release-drafter/release-drafter.

10/10

grafana/shared-workflows/_shared-workflows-trigger-argo-workflow/actions/get-vault-secrets

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

docker/bake-action/subaction/list-targets/it7ms0%5c%5cqqq

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10

Maintained action available

launchdarkly/find-code-references-in-pull-request

Find Code Reference Flags in Pull Requests

6/10

step-integration-tests/auto-pdpr-test-83490-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/trigger-pipeline-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action for triggering a build on a Buildkite pipeline. Secure drop-in replacement for buildkite/trigger-pipeline-action.

10/10

checkmarx/chainalert-github-action

scans popular packages and alerts in cases there is suspicion of an account takeover

4/10

step-security/dsanders11-project-actions/fill

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10