Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

org-deacc-sec/no-secrets-here/.github/actions/safe-action

Empty Repo

2/10

tsukimarf/stytch-ios/.github/actions/bootstrap

5/10

grafana/writers-toolkit/vale-action

Technical documentation guidelines for Grafana Labs documentation

7/10

harden-runner-canary/caffeine/.github/actions/run-gradle

A high performance caching library for Java

4/10

github/contributors

GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.

7/10

uncenter/setup-taplo

Setup Taplo in GitHub Actions.

3/10

step-integration-tests/auto-pdpr-test-38646-6/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

pyvista/setup-headless-display-action

GitHub Action to setup a headless display on Linux and Windows (not needed on MacOS)

6/10

action-pack/tag-exists

Action to determine if a tag exists.

5/10

Maintained action available

sanity-io/reference-api-typedoc/.github/actions/fill

Combined Reference API Docs for all things Sanity

3/10

grafana/shared-workflows/_shared-workflows-check-drone-signature/actions/get-vault-secrets

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

step-security/setup-chrome/__builder_checkout_dir__/.github/actions/privacy-check

Set up your GitHub Actions workflow with a specific version of chromium. Secure drop-in replacement for browser-actions/setup-chrome.

10/10

docker/setup-compose-action

GitHub Action to set up Docker Compose

7/10

pytorch/multipy/.github/actions/public-layout.tsx

torch::deploy (multipy for non-torch uses) is a system that lets you get around the GIL problem by running multiple Python interpreters in a single C++ process.

1/10

tsukimarf/eips/.github/actions/fill

The Ethereum Improvement Proposal repository

5/10

Maintained action available

upciti/wakemeops-action

Github Action for WakeMeOps

4/10

softprops/action-gh-release/_next/static/chunks/85539-57c4de78f1bfdd64.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10

Maintained action available

dargon789/openzeppelin-contracts/.github/actions/gas-compare

OpenZeppelin Contracts is a library for secure smart contract development.

5/10

Maintained action available

fortify/github-action/internal/sc-sast-login

Fortify GitHub Actions

1/10

Maintained action available

stringbean/docker-healthcheck-action

GitHub Action for checking & waiting for Docker container status

2/10