Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
ethpandaops/assertoor-github-action
Reusable github action to poll assertoor test status
step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/secure-download-artifact
:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.
kong/dynamic-uses
Dynamically resolve and use another GitHub action
step-security/setup-msbuild
A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications. Secure drop-in replacement for microsoft/setup-msbuild.
lfreleng-actions/openssf-scorecard-summary-action
Generates step/summary output containing the report URL
azure/azure-sdk-actions
Github Actions repository leveraged by the Azure SDK team.
dbelyaev/action-checkstyle
Automatically enforce Java code standards in PRs with inline feedback. Powered by Checkstyle + reviewdog for seamless GitHub integration.
step-security/ghaction-upx/__builder_checkout_dir__/.github/actions/privacy-check
GitHub Action for UPX, the Ultimate Packer for eXecutables. Secure drop-in replacement for crazy-max/ghaction-upx.
nrwl/last-successful-commit-action
GitHub action for identifying the last successful commit for a given workflow and branch.
gerrymanoim/pr-prefix-labeler
Automatically label your PRs based on the title prefix
kubb-labs/config/.github/fill
Configuration and tools for Kubb packages
tsukimarf/docs/.github/actions/fill
The open-source repo for docs.github.com
stacklet/superset/.github/actions/cached-dependencies
Apache Superset is a Data Visualization and Data Exploration Platform
catnekaise/cognito-idpool-auth
Authenticate with Amazon Cognito Identity from GitHub Actions.
egibs/setup-chainctl
GitHub Action to install chainctl in your workflow
cloudposse/atmos/actions/cache
Atmos is the open-source runtime for infrastructure โ it builds, authenticates, and ships Terraform, OpenTofu, Kubernetes, Helm, and containers the same way on your laptop, in CI, and with AI agents.
rvenutolo/linpeas-flake/.github/actions/notify-workflow-result
Personal Nix flake wrapping peass-ng/PEASS-ng linpeas.sh for nix run
fortnoxab/changesets-java-dependabot-action
GitHub Action that automatically creates a changeset for Java dependencies that are updated by Dependabot
angular/dev-infra/github-actions/public-layout.tsx
Angular Development Infrastructure
eliashaeussler/gha/.github/actions/setup-php
๐ Reusable GitHub Actions and Workflows for use in my personal projects