Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

sonarsource/gh-action_azure-artifact-signing

Shared GitHub Action to sign Windows artifacts with Azure Artifact Signing

6/10

cysharp/actions/.github/actions/unity-builder

3/10

Maintained action available

assistivlabs/ghost-demo/.github/actions/restore-cache

Independent technology for modern publishing, memberships, subscriptions and newsletters.

3/10

relative-ci/agent-action

GitHub action that sends bundle stats and CI build information to RelativeCI

3/10

Maintained action available

crohr/composer

Use the Composer CLI in your Github Actions.

2/10

check-spelling/checkout-merge

Action for synthesizing a merge commit

5/10

step-security/action-cond/__builder_checkout_dir__/.github/actions/secure-download-artifact

Conditional value for GitHub Action - missing expression for GitHub Actions . Secure drop-in replacement for haya14busa/action-cond.

10/10

yelinaung/terraform-provider-aws/.github/actions/community_check

The AWS Provider enables Terraform to manage AWS resources.

2/10

joao-zanutto/get-selected

GitHub Actions that retrieves the values of selected checkboxes for workflow_dispatch events

3/10

Maintained action available

step-security/metadata-action

GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker. Secure drop-in replacement for docker/metadata-action.

10/10

Maintained by StepSecurity

autero1/action-terragrunt

GitHub action for setting up Terragrunt https://terragrunt.gruntwork.io

3/10

kengotoda/actions-setup-docker-compose

the GitHub Action setting up docker-compose command

3/10

angular/dev-infra/github-actions/previews/upload-artifacts-to-firebase

Angular Development Infrastructure

6/10

project-tick/project-tick/.github/actions/mnv/test_artifacts

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

5/10