Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nyrkio/change-detection

GitHub Action for Continuous Benchmarking and Nyrkiö Change Detection

2/10

caffeelake/xformers/.github/actions/setup-build-cuda

Hackable and optimized Transformers building blocks, supporting a composable construction.

0/10

coveo/ui-kit/.github/actions/public-layout.tsx

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

launchdarkly/rust-sdk-transport/.github/actions/ci

Transport for use with LaunchDarkly Rust libraries

6/10

step-security/delete-untagged-ghcr-action

Action for delete containers from Github container registry. Secure drop-in replacement for Chizkiyahu/delete-untagged-ghcr-action.

10/10

Maintained by StepSecurity

stcarolas/setup-maven

Set up your GitHub Actions workflow with a specific version of Apache Maven

4/10

ministryofjustice/cloud-platform-environments/cmd/push-terraform-module-version

Environment configuration for the Cloud Platform

6/10

danger/danger-js

⚠️ Stop saying "you forgot to …" in code review

4/10

Maintained action available

step-security/vitest-coverage-report-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action to report vitest test coverage results. Secure drop-in replacement for davelosert/vitest-coverage-report-action.

9/10

bit-tasks/dependency-update

Bit component updates lookup task for CI/CD

0/10

step-security/dependabot-fetch-metadata/__builder_checkout_dir__/.github/actions/privacy-check

Extract information about the dependencies being updated by a Dependabot-generated PR. Secure drop-in replacement for dependabot/fetch-metadata.

10/10

step-security/push-md-to-notion

Push Markdown to Notion. Secure drop-in replacement for JoshStern/push-md-to-notion.

10/10

Maintained by StepSecurity

emqx/push-helm-action

3/10

nvidia/nemoclaw/.github/actions/resolve-hermes-base-image

Run agents like Hermes and OpenClaw more securely inside NVIDIA OpenShell with managed inference

4/10

frederick888/gh-ph

`gh-ph` is a GitHub CLI extension and a GitHub Action that puts commit history into your pull request description

4/10

zendesk/action-create-release

Github action to create releases

3/10

anthony-spruyt/xfg

Manage files, settings, and repositories across GitHub, Azure DevOps, and GitLab — declaratively, from a single YAML config

7/10

johnwason/vcpkg-action

Simple vcpkg action to build and cache packages

5/10

Maintained action available

kong/slsa-github-generator/.github/actions/secure-builder-checkout

Language-agnostic SLSA provenance generation for Github Actions

3/10

jasonetco/create-an-issue

A GitHub Action for creating a new issue from a template file.

4/10