Assess the risk of third-party GitHub Actions

banyan/auto-label

A GitHub action to add labels to Pull Request based on matched file patterns

nvidia/nautobot-broker-nats/.github/actions/ci

This is an event broker for nautobot that publishes events to NATS.

octodemo/philips-actions-workshop/.github/actions/custom-js-action

0/10

jjchange10/test-actions/.github/actions/github-api-test-action

grafana/mimir/_shared-workflows-dockerhub-login/actions/image

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

7/10

step-security/action-markdownlint/__builder_checkout_dir__/.github/actions/secure-download-artifact

Run markdownlint with reviewdog. Secure drop-in replacement for reviewdog/action-markdownlint.

10/10

sonarsource/sonar-plugin-api/.actions/config-gradle

API to develop plugins for SonarQube (Server, Cloud) and SonarQube for IDE

7/10

actions/runner

The Runner for GitHub Actions :rocket:

10/10

scribe-security/action-slsa

Collect, Create and Store SLSA provenance evidence

ministryofjustice/laa-submit-a-bulk-claim/.github/actions/ecr-update-image-tags

Web application for bulk upload of claims data

7/10

mattnotmitt/doxygen-action

GitHub Action for generating Doxygen documentation for your projects.

step-integration-tests/auto-pdpr-test-87628-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

actionshub/chef-delivery

Repository for the chef-delivery-action Github Action

elastic/apm-agent-java/.github/workflows/stash

devantler-tech/actions/setup-ksail-action

Actions designed to streamline CI/CD processes.

4/10

step-security/set-github-variable/__builder_checkout_dir__/.github/actions/secure-download-artifact

Use this Github Action to update a variable in your Github Action Workflows for your repository. Secure drop-in replacement for mmoyaferrer/set-github-variable.

9/10

dustin4444/docs-v2/.github/actions/build-docs-site

InfluxData Documentation that covers InfluxDB Cloud, InfluxDB OSS 2.x, InfluxDB OSS 1.x, InfluxDB Enterprise, Telegraf, Chronograf, Kapacitor, and Flux.

metamask/github-tools/.github/actions/create-release-pr

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

step-integration-tests/auto-pdpr-test-69915-5/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing