Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

negz/create-tag

Create a git tag!

3/10

mridang/action-runner-common

Composite GitHub Action wrapping step-security/harden-runner and ScribeMD/docker-cache, pinned by SHA, applied as the first step of every workflow.

2/10

tobked/label-when-approved-action

2/10

octokit/request-action

A GitHub Action to send arbitrary requests to GitHub's REST API

9/10

pytorch/test-infra/.github/actions/clang-tidy-upload

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

aquaproj/registry-action/generate-registry

GitHub Actions for aqua Registry

6/10

jurplel/install-qt-action

Install Qt on your Github Actions workflows with just one simple action

6/10

mattmoor/checkrun-action

3/10

austenstone/security-export

GitHub Action to export GitHub security alerts

3/10

cloudposse/github-action-interface-environment/public-layout.tsx

Get Environments settings from private settings action provider

6/10

approved-3rd-party-actions/publish-unit-test-result-action

GitHub Action to publish unit test results on GitHub

2/10

grafana/plugin-actions/bundle-schema-types

8/10

apple/swift-nio/.github/actions/pull_request_semver_label_checker

Event-driven network application framework for high performance protocol servers & clients, non-blocking.

7/10

step-security/ghaction-github-runtime/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to expose GitHub runtime to the workflow. Secure drop-in replacement for crazy-max/ghaction-github-runtime.

10/10

install-pinned/build

Securely install the latest build release from PyPI.

3/10

step-security/cysharp-actions/.github/actions/unity-builder

Secure drop-in replacement for Cysharp/Actions.

10/10

Maintained by StepSecurity

clearlyip/code-coverage-report-action

Provides Code Coverage reports in Github Actions

6/10

sasobadovinac/palace/.github/actions/setup-runner

3D finite element solver for computational electromagnetics

5/10

Maintained action available

envoyproxy/toolshed/gh-actions/github/artifact/cache/id

7/10

step-security/saucectl-run-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for running saucectl test suites. Secure drop-in replacement for saucelabs/saucectl-run-action.

10/10