Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

kong/ksai-public/.github/actions/dispatch-record

The KSAI runtime, published here so a repository that cannot resolve it otherwise can still call it. Generated on each release - do not edit by hand.

2/10

enricomi/publish-unit-test-result-action/misc/action/json-output

GitHub Action to publish unit test results on GitHub

2/10

nvidia/nemo-relay/source-checkout/.github/actions/load-ci-tool-versions

Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.

7/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/docker-bake-action

Mirror from https://github.com/docker/bake-action

2/10

Maintained action available

step-security/gradle-dependency-submission/__builder_checkout_dir__/.github/actions/privacy-check

Calculates dependencies for a Gradle build-target and submits the list to the Dependency Submission API. Secure drop-in replacement for mikepenz/gradle-dependency-submission.

10/10

hollowman6/sarif4reviewdog

Static Analysis Results Interchange Format (SARIF) support for reviewdog by converting it into Reviewdog Diagnostic Format (RDFormat)

3/10

sonarsource/sonar-flex/.actions/fill

6/10

step-security/chrome-extension-upload/__builder_checkout_dir__/.github/actions/privacy-check

upload & publish extensions to the Chrome Web Store. Secure drop-in replacement for mnao305/chrome-extension-upload.

10/10

backstage/actions/renovate-changesets

Custom actions for automating Backstage workflows

4/10

Maintained action available

yonasbsd/loki/actions/backport

Like Prometheus, but for logs.

3/10

Maintained action available

nvidia-nemo/megatron-bridge/fw-ci-templates/.github/actions/publish-docs

Training library for Megatron-based models with bidirectional Hugging Face conversion capability

7/10

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/fill

Github actions for HMPPS projects

6/10

launchdarkly/erlang-server-sdk/.github/actions/public-layout.tsx

LaunchDarkly Server-Side SDK for Erlang/Elixir

5/10

Maintained action available

openai/gabriel/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

An official OpenAI toolkit for social scientists and data scientists to measure quantitative attributes in text, images, or audio using the GPT API.

4/10

orcid-dev/orcid_dev-source-cache-action

2/10

jun3453/slack-pr-open-notification-action

Use github actions to notify slack that a pull request has been opened.

2/10

sonarsource/sonar-classloader/.actions/get-build-number

Toolbox for Java classloaders

6/10

step-security/action-download-artifact/__builder_checkout_dir__/.github/actions/secure-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

10/10

chainguard-actions/github-codeql-action/init

4/10

Maintained action available

slidoapp/xcresulttool

A GitHub Action that generates a human-readable test report from the Xcode result bundle and shows it on GitHub Checks.

4/10