Assess the risk of third-party GitHub Actions

Maintained by StepSecurity

step-security/trx-parser

This repository contains a Typescript GitHub action for parsing trx files and creating status check for each trx file based on its test outcome. Secure drop-in replacement for NasAmin/trx-parser.

8/10

coveooss/tgf-images/.github/actions/build-and-push-images

Contains standard TGF image defintion

grafana/oncall/.github/actions/setup-python

Developer-friendly incident response with brilliant Slack integration

3/10

anz-bank/sysl-go/.github/action/github-tag-action

Communication library used by SYSL-generated code written in Go.

3/10

oven-sh/setup-bun

Set up your GitHub Actions workflow with a specific version of Bun

rust-lang/crates-io-auth-action

Get a crates.io temporary access token

9/10

veeezo/docs-1/.github/actions/get-docs-early-access

The open-source repo for docs.github.com

step-security/cypress-io-github-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for running Cypress end-to-end & component tests. Secure drop-in replacement for cypress-io/github-action.

8/10

fortify/github-action/fod-sast-scan

Fortify GitHub Actions

launchdarkly/ruby-server-sdk/.github/actions/setup

LaunchDarkly Server-side SDK for Ruby

grafana/plugin-actions/bundle-size

rubygems/release-gem

The official GitHub Action for publishing your gem files to RubyGems.org

5/10

reviewdog/action-flake8

Runs flake8 with Reviewdog :dog:

3/10

contentful/create-contentful-app/.github/actions/lint-and-test

Bootstrap a Contentful App

grafana/loki/lib/actions/should-release

Like Prometheus, but for logs.

5/10

axelarnetwork/axelar-gmp-sdk-solidity/.github/actions/upload-docs

Solidity libraries and utilities provided by Axelar.

step-security/jest-coverage-action-demo/image

9/10

check-spelling/check-spelling/../check-spelling-actions/upload-artifact

Spelling checker action to check spelling in repositories / pull requests / commits

7/10

pytorch/tensordict/test-infra/.github/actions/check-disk-space

TensorDict is a pytorch dedicated tensor container.