Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

tektoncd/plumbing/.github/actions/setup-nightly-infra

tektoncd/plumbing/.github/actions/setup-nightly-infra

This repo holds configuration for infrastructure used across the tektoncd org 🏗️

5/10
samypr100/setup-dev-drive

samypr100/setup-dev-drive

A GitHub Action to setup a Windows Dev Drive

5/10
pytorch/audio/test-infra/.github/actions/setup-ssh

pytorch/audio/test-infra/.github/actions/setup-ssh

Data manipulation and transformation for audio signal processing, powered by PyTorch

4/10
lfit/releng-reusable-workflows/.github/actions/repository-metadata-action

lfit/releng-reusable-workflows/.github/actions/repository-metadata-action

Reusuable workflows developed by LF Release Engineering

7/10
TheDoctor0/zip-release

TheDoctor0/zip-release

GitHub action that can be used to create release zip archive.

5/10
rapidsai/dependency-file-generator/.github/actions/semantic-release

rapidsai/dependency-file-generator/.github/actions/semantic-release

6/10
aerospike/aerospike-client-java/.github/actions/publish-build-info-to-jfrog

aerospike/aerospike-client-java/.github/actions/publish-build-info-to-jfrog

Aerospike Java Client Library

5/10
hiddenlayerai/hiddenlayer-model-scan-github-action

hiddenlayerai/hiddenlayer-model-scan-github-action

Official HiddenLayer Github Action for the Model Scanner

7/10
step-security/action-install-gh-release

step-security/action-install-gh-release

GitHub Action to install the Github Release binaries. Secure drop-in replacement for jaxxstorm/action-install-gh-release.

10/10
Maintained by StepSecurity
step-security/conventional-pr-title-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/conventional-pr-title-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.

10/10
actionutils/create-release-pr

actionutils/create-release-pr

WIP

2/10
karancode/yamllint-github-action

karancode/yamllint-github-action

Github Action for linting yaml files using yamllint

4/10
pytorch/tensordict/test-infra/.github/actions/teardown-windows

pytorch/tensordict/test-infra/.github/actions/teardown-windows

TensorDict is a pytorch dedicated tensor container.

3/10
casadi/commercial_solvers

casadi/commercial_solvers

Set up commercial solvers in CI for testing purposes

2/10
sredevopsorg/kserve/.github/actions/kserve-dep-setup

sredevopsorg/kserve/.github/actions/kserve-dep-setup

Standardized Serverless ML Inference Platform on Kubernetes

2/10
Energinet-DataHub/.github/.github/actions/docker-image-version

Energinet-DataHub/.github/.github/actions/docker-image-version

Repository containing the common .github items, such as actions, workflows etc.

8/10
pytorch/text/test-infra/.github/actions/setup-binary-upload

pytorch/text/test-infra/.github/actions/setup-binary-upload

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10
supercharge/redis-github-action

supercharge/redis-github-action

Use Redis in GitHub Actions

6/10
check-spelling/check-spelling

check-spelling/check-spelling

Spelling checker action to check spelling in repositories / pull requests / commits

5/10
natescherer/changelog-management-action

natescherer/changelog-management-action

A GitHub action to parse and update changelogs in Keep a Changelog 1.0.0 format; built on the ChangelogManagement PowerShell module.

5/10