Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/action-remove-labels/__builder_checkout_dir__/.github/actions/secure-download-artifact

🏷️ GitHub Action to remove labels. Secure drop-in replacement for actions-ecosystem/action-remove-labels.

10/10

sibiraj-s/action-archiver

Github action to generate tar/zip archives

4/10

Maintained action available

step-security/quarto-actions/publish

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10

Maintained by StepSecurity

step-security/repository-dispatch

A GitHub action to create a repository dispatch event. Secure drop-in replacement for peter-evans/repository-dispatch.

10/10

Maintained by StepSecurity

octopusdeploy/deploy-release-action

| Public | :octocat: GitHub Action to Deploy a Release in Octopus Deploy

7/10

project-chip/connectedhomeip/.github/actions/checkout-submodules

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

6/10

mercari/actions-runner-controller/.github/actions/setup-arc-e2e

Kubernetes controller for GitHub Actions self-hosted runners

4/10

garethahealy/pre-commit-action

a GitHub action to run `pre-commit`

3/10

container-tools/kind-action

3/10

ariga/atlas-action/schema/push

GitHub Actions for Atlas

4/10

Maintained action available

launchdarkly/php-server-sdk-redis-predis/.github/actions/build-docs

Redis integration for the LaunchDarkly SDK for Server-side PHP using predis

5/10

thekuwayama/release-gem

The official GitHub Action for publishing your gem files to RubyGems.org

2/10

falkordb/gce-github-runner

Ephemeral GCE/GCP GitHub self-hosted runner

3/10

github/gh-aw-actions/setup

Shared Actions used with GitHub Agentic Workflows

9/10

snow-actions/git-config-user

Set git user name and email address

4/10

step-security/docker-build-push-action

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10

Maintained by StepSecurity

mitoma/sver-actions/setup

GitHub Actions for sver

6/10

fallard84/bullfrog

Github Action for securing your Github workflows

3/10

sonia-corporation/stale

A GitHub action to stale and close automatically your issues and pull requests.

2/10

kong/wasmtime/.github/actions/define-llvm-env

Standalone JIT-style runtime for WebAssembly, using Cranelift

3/10