Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/snyk-actions/dotnet

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10

Maintained by StepSecurity

jscrambler/code-integrity-actions/protect

Code Integrity Github Actions

3/10

Maintained action available

step-security/s3-actions-cache/image

Cache to S3 storage with official actions/cache@v2 fallback. Secure drop-in replacement for tespkg/actions-cache.

10/10

sonarsource/helm-chart-sonarqube/.github/actions/helm-index

7/10

step-security/actions-codespell/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Actions to run codespell over your code. Secure drop-in replacement for codespell-project/actions-codespell.

10/10

sasobadovinac/mfem/.github/actions/sanitize/config

Lightweight, general, scalable C++ library for finite element methods

5/10

Maintained action available

nackerman-nydig/hadolint-action

GitHub action for Hadolint, A Dockerfile linting tool

3/10

githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289

GitHub token permissions Monitor and Advisor actions

2/10

launchdarkly/find-code-references-in-pull-request/.github/actions/fill

Find Code Reference Flags in Pull Requests

4/10

sigmahq/sigma-rules-validator

Validates Sigma rules using the JSON schema

4/10

coveooss/snapshots-github-actions/.github/actions/deploy

An example of how-to manage your Coveo Organization with Code, GHA, and the Coveo CLI

3/10

crowbarmaster/gh-automatic-releases

Custom GH Action forked from MarvinPinto.

3/10

pytorch/test-infra/test-infra/.github/actions/setup-ssh

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

chetan/invalidate-cloudfront-action

Invalidate AWS CloudFront distribution paths

5/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

apache/skywalking-eyes/header

A full-featured license tool to check and fix license headers and resolve dependencies' licenses.

7/10

axiomhq/annotation-action

This action allows you to create an annotation in Axiom.

3/10

vmoens/test-infra/test-infra/.github/actions/fill

This repository hosts code that supports the testing infrastructure for the main PyTorch repo. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

0/10

sonarsource/release-github-actions/notify-slack

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/xmlrpc.php

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10