Assess the risk of third-party GitHub Actions

azure/webapps-deploy

Enable GitHub developers to deploy to Azure WebApps using GitHub Actions

8/10

yonasbsd/umpire/.github/actions/abi-compat

An application-focused API for memory management on NUMA & GPU architectures

elastic/cloudbeat/.github/actions/k8s-ci

Analyzing Cloud Security Posture

4/10

yonasbsd/rocksdb/.github/actions/post-steps

A library that provides an embeddable, persistent key-value store for fast storage.

equinor/fusion-workspace/.github/actions/pnpm-setup

razorpay/blade/.github/actions/install-dependencies

Design System that powers Razorpay

base/account-sdk/.github/actions/setup

4/10

grafana/community-contributions/.github/actions/external-pr-validation/assess-quality

External contributor PR workflow testing sandbox

Maintained by StepSecurity

step-security/cypress-io-github-action

GitHub Action for running Cypress end-to-end & component tests. Secure drop-in replacement for cypress-io/github-action.

9/10

atlassian/gajira-cli

openzeppelin/moonbeam/.github/workflow-templates/build-prod-binary

An Ethereum-compatible smart contract parachain on Polkadot

hashicorp/setup-packer

Run HashiCorp Packer as part of your GitHub Actions Workflow

8/10

step-security/msvc-dev-cmd/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to setup Developer Command Prompt for Microsoft Visual C++. Secure drop-in replacement for ilammy/msvc-dev-cmd.

10/10

milhy545/coder/.github/actions/setup-go-paths

Secure environments for developers and their agents

docker/login-action

GitHub Action to login against a Docker registry

8/10

slsa-framework/slsa-github-generator/actions/nodejs/publish

Language-agnostic SLSA provenance generation for Github Actions

ksivamuthu/actions-setup-gh-cli

Actions to setup gh cli

3/10

balena-io/deploy-to-balena-action

Official Github action to deploy releases to balenaCloud environments

3/10