Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

envoyproxy/toolshed/gh-actions/docker/cache/restore

7/10

xu-cheng/latex-action

:octocat: GitHub Action to compile LaTeX documents

6/10

pytorch/text/test-infra/.github/actions/pull-docker-image

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10

yonasBSD/opendal/.github/actions/setup-ocaml

Apache OpenDAL: access data freely.

3/10

Maintained action available

ropensci-review-tools/pkgcheck-action

GitHub action for {pkgcheck}

6/10

grafana/grafana-advisor-app/_shared-workflows-trigger-argo-workflow/actions/get-vault-secrets

4/10

Maintained action available

step-security/change-string-case-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.

10/10

grafana/grafana/ephemeral

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

4/10

Maintained action available

hashicorp/terraform

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

8/10

OpenZeppelin/openzeppelin-upgrades/.github/actions/setup

Plugins for Hardhat and Foundry to deploy and manage upgradeable contracts on Ethereum.

4/10

pytorch/audio/test-infra/.github/actions/teardown-windows

Data manipulation and transformation for audio signal processing, powered by PyTorch

4/10

Maintained action available