Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
sonarsource/sonarlint-core/gh-action_release/main
Core library to run SonarQube for IDE analysis
beer-sakthai/sak-family-agent/.github/actions/setup-uv-python
Six AI agent personas (SakThai, SakKing, SakSee, SakSit, SakJules, SakTan) sharing one home β the main repository for the Sak-Family-Agent ecosystem. Built from a shelter in Cork with $0 budget.
sbomify/sbomify-action
SBOM generation, enrichment, and management for CI/CD. CycloneDX & SPDX, from lockfiles or containers.
step-security/slsa-github-generator/.github/actions/secure-builder-checkout/_next/static/chunks/9484-c9215fa9b6fcf134.js
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.
syphar/restore-pip-download-cache
deliverybot/deployment-status
GitHub action for updating deployments with status events.
prowler-cloud/prowler/.github/actions/setup-python-uv
Prowler is the worldβs most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
step-security/setup-qemu-action/_next/static/chunks/78278-8878f2642e10241b.js
GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.
kong/slsa-github-generator/.github/actions/secure-upload-folder
Language-agnostic SLSA provenance generation for Github Actions
tanker187/stagehand/.github/actions/select-browserbase-region
The AI Browser Automation Framework
jey3dayo/pr-insights-labeler
GitHub Action for PR file size and metrics checking
jahid11978/claude-agent-sdk-python/.github/actions/setup-claude-auth
bainss/remove-stale-branches
Github action to remove stale branches
yonasbsd/slint/src/.github/actions/image
Slint is an open-source declarative GUI toolkit to build native user interfaces for Rust, C++, JavaScript, or Python apps.
configcat/scan-repository
ConfigCat's repository scanner GitHub Action. ConfigCat is a hosted feature flag service: https://configcat.com. Manage feature toggles across frontend, backend, mobile, desktop apps. Alternative to LaunchDarkly. Management app + feature flag SDKs.
zavoloklom/shields/.github/actions/image
Concise, consistent, and legible badges in SVG and raster format
step-security/trufflehog-action
Find, verify, and analyze leaked credentials. Secure drop-in replacement for trufflesecurity/trufflehog.
step-security/docker-build-push-action/_next/static/chunks/60996-46ad4efc4ab03f23.js
GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.
jahid11978/openclaw-local-test/.github/actions/fill
Test branch for OpenClaw PR's
clowdhaus/terraform-composite-actions/directory
Contains composit GitHub actions for use with Terraform AWS Module workflows