Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
mondeja/remove-labels-gh-action
Remove labels from GitHub issues or pull requests
step-security/release-notes-generator-action
Action to auto generate a release note based on your events. Secure drop-in replacement for Decathlon/release-notes-generator-action.
haythem/public-ip
Queries GitHub actions runner's public IP address
docker/bake-action/%3C/script%3E%3Ckww3f2%3E/list-targets
GitHub Action to use Docker Buildx Bake as a high-level build command
yonasBSD/wazuh/.github/actions/4_operational_prerelease_coverity_issue
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
jobayertangail92-hub/setup-node
Set up your GitHub Actions workflow with a specific version of node.js
kunalnagarco/action-cve
A GitHub action that sends Dependabot Vulnerability Alerts to multiple sources.
bus1/cabuild/action/msdevshell
Content-Addressable Build Environments
oxsecurity/megalinter/flavors/cupcake
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
soos-io/soos-dast-github-action
SOOS DAST GitHub Action - Register for a Free Trial at https://app.soos.io/register
snnaplab/get-labels-action
optum/sourcehawk/.github/actions/build-windows-native-image
Sourcehawk is an extensible compliance as code tool which allows development teams to run compliance scans on their source code.
singularityhub/install-singularity
Action to install Singlarity optimized for simplicity.
step-security/filter-sarif
GitHub Action for filtering Code Scanning alerts by path and id. Secure drop-in replacement for advanced-security/filter-sarif.
wistia/parse-tool-versions
Github action created to parse .tool-versions into the environment
step-security/gh-find-current-pr/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact
Github Action for finding the Pull Request (PR) associated with the current SHA. Secure drop-in replacement for jwalton/gh-find-current-pr.
aliyun/ack-set-context
GrantBirki/git-diff-action
A GitHub Action for gathering the git diff of a pull request in raw or JSON format
devops-actions/action-get-tag
:gear: A GitHub Action to get the pushed tag name