Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
nvidia/nautobot-app-fsus/.github/actions/poetry
Field Serviceable Units for Nautobot
ministryofjustice/hmpps-probation-integration-services/.github/actions/gradle-build
A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.
kineticcafe/actions/dependabot-automerge
Shared public actions for Kinetic Commerce
yonasbsd/surrealdb/.github/actions/publish-crate
A scalable, distributed, collaborative, document-graph database, for the realtime web
bahmutov/npm-install
GitHub Action for install npm dependencies with caching without any configuration
egibs/actions/whereami
A collection of reusable Github Actions workflows.
guillaumefalourd/stackspot-ai-rqc
StackSpot AI Remote Quick Command Action
szenius/set-timezone
GitHub action to set timezone in your locale, works with Linux, Windows, MacOS
energinet-datahub/.github/.github/actions/update-base-environment
Repository containing the common .github items, such as actions, workflows etc.
ben-manes/caffeine/.github/actions/run-benchmark
A high performance caching library for Java
elgohr/ecr-login-action
A Github Action which can be used to authenticate with AWS ECR
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2017/10
This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.
softprops/action-gh-release/_next/static/chunks/2113-2d15d90a479579f8.js
๐ฆ :octocat: GitHub Action for creating GitHub Releases
step-security/conventional-pr-title-action
Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.
oaslananka/cifence
Static security analyzer and policy engine for GitHub Actions workflows, detecting unsafe permissions, mutable refs, unpinned actions, pull_request_target risks, SARIF, baselines, and CI gates.
step-security/aws-secretsmanager-get-secrets/__builder_checkout_dir__/.github/actions/privacy-check
Secure drop-in replacement for aws-actions/aws-secretsmanager-get-secrets.
rustdesk-org/arch-makepkg-action
Github action for building archlinux packages
elastic/apm-server/.github/workflows/public-layout.tsx
tsukimarf/claude-code-security-review
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
tlmsllc/chainlink/.github/actions/fill
node of the decentralized oracle network, bridging on and off-chain computation