Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

warpbuilds/cache

Cache dependencies and build outputs in GitHub Actions

3/10

pytorch/multipy/.github/actions/setup-ssh

torch::deploy (multipy for non-torch uses) is a system that lets you get around the GIL problem by running multiple Python interpreters in a single C++ process.

1/10

step-security/gh-find-current-pr/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for finding the Pull Request (PR) associated with the current SHA. Secure drop-in replacement for jwalton/gh-find-current-pr.

10/10

qoomon/actions--setup-git

Setup Git config to be ready for git commit and push commands

3/10

ministryofjustice/hmpps-github-actions/.github/actions/slack_release_results

Github actions for HMPPS projects

6/10

pytorch/tensordict/test-infra/.github/actions/calculate-docker-image

TensorDict is a pytorch dedicated tensor container.

4/10

Maintained action available

pavanmudigonda/jacoco-reporter

GitHub Action to Publish JaCoCo Format Code Coverage XML and attach it to the Workflow Run as a Check Run. Also can enforce Coverage Quality Gate.

7/10

jeertmans/filesfinder

Find files matching patterns while respecting .gitignore

3/10

codepunkt/npm-lockfile-changes

Creates PR comments with a human-readable summaries of NPM lockfile changes.

2/10

ryand56/r2-upload-action

GitHub Action to upload files or directories to a Cloudflare R2 bucket (or another S3 compatible API), built on top of @aws-sdk/client-s3 in TypeScript.

5/10