Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

camunda/infra-global-github-actions/fossa/info

Small Github Actions maintained by Infra team and used by other teams inside Camunda

5/10

Maintained action available

simonmarty/aws-secretsmanager-get-secrets

2/10

dagster-io/dagster-cloud-action/actions/utils/image

4/10

step-security/setup-pscale-action/__builder_checkout_dir__/.github/actions/privacy-check

Setup the PlanetScale CLI for GitHub Actions. Secure drop-in replacement for planetscale/setup-pscale-action.

10/10

github/codeql-action/analyze

Actions for running CodeQL analysis

10/10

yonasbsd/loki/lib/actions/%5c%5c%5c%22https%3a/goreportcard.com/report/github.com/grafana/loki%5c%5c%5c%22%5cu003e%5cu003cimg

Like Prometheus, but for logs.

3/10

Maintained action available

projectdiscovery/actions/goreleaser

ProjectDiscovery's Composite Actions

5/10

Maintained action available

kibertoad/wait-action

💤 Very, very simple (and small) action to sleep for an amount of time — 10s, 2m, etc.

3/10

ionos-deploy-now/project-action

1/10

batinicaz/gha/.github/actions/setup-terraform-docs

Repository containing re-usable workflows & actions for use within GitHub actions.

4/10

Maintained action available

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-includes/js/jquery/ui

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

matheusandre1/kroxylicious/.github/actions/common/setup-java

Kroxylicious, the snappy open source proxy for Apache Kafka®

2/10

jimschubert/labeler-action

GitHub Action allowing for applying labels to issues and pull requests based on patterns found in the title or description.

3/10

dustin4444/solana-web3.js/.github/workflows/actions/compile-gh-pages

Solana JavaScript SDK

5/10

envoyproxy/toolshed/gh-actions/gcp/setup

7/10

grafana/opensearch-datasource/actions/image

Grafana data source plugin for querying AWS OpenSearch and Elasticsearch clusters

7/10

vmactions/haiku-vm

Test your code in a real Haiku virtual machine on GitHub Actions -- QEMU-powered, with SSH and two-way folder sync

5/10

Maintained action available

paulritter/yaml-schema-validator

A github action used to validate yaml files using Yamale

3/10

grafana/agent/actions/backport

Vendor-neutral programmable observability pipelines.

0/10

chriscarini/intellij-platform-plugin-verifier-action

GitHub Action for executing the intellij-plugin-verifier

3/10