Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

envoyproxy/toolshed/actions/docker/image

6/10

step-integration-tests/auto-pdpr-test-69915-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

jauderho/dnscontrol-action

Deploy your DNS configuration using GitHub Actions with DNSControl.

6/10

tannergolden/standards/.github/actions/init-template

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.

5/10

step-security/next-release-tag/__builder_checkout_dir__/.github/actions/privacy-check

A Github Action which automatically generates next Release Tag for you. Secure drop-in replacement for amitsingh-007/next-release-tag.

8/10

jemand771/push-docker-artifact

Custom action to push docker image artifacts from github actions to ghcr

2/10

step-integration-tests/auto-pdpr-test-57300-7/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nasa/cfs/actions/stop-cfs-container

The Core Flight System (cFS)

8/10

anbiona/secureblue/.github/workflows/fill

A security-focused desktop and server linux operating system.

5/10

hiero-ledger/hiero-ethereum-execution-spec-tests/execution-specs/.github/actions/load-docker-images

Specification for the Execution Layer. Tracking network upgrades.

7/10

launchdarkly/gh-actions/actions/fill

LaunchDarkly shared GitHub Actions and Workflows

5/10

Maintained action available

edera-dev/actions/push-metrics

Shared GitHub Actions Repo

4/10

Maintained action available

caffeelake/servo/.github/actions/runner-timeout

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

5/10

Maintained action available

yonasbsd/yarr/.github/actions/prepare

yet another rss reader

2/10

step-security/mage-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for Mage. Secure drop-in replacement for magefile/mage-action.

8/10

step-security/wow-actions-auto-assign

🎯 Automatically add reviewers/assignees to issues/PRs. Secure drop-in replacement for wow-actions/auto-assign.

8/10

Maintained by StepSecurity

adrise/s3-cp-action

GitHub Action for S3 cp

3/10

ministryofjustice/devsecops-actions/cruft/create

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

5/10

lfreleng-actions/nexus-publish-action

Publishes content to Sonatype Nexus Repository servers

8/10

arturcic/gitversion/.github/actions/artifacts-restore

Easy Semantic Versioning (http://semver.org) for projects using Git

7/10