Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

linuxfoundation/lfx-public-workflows/.github/actions/public-layout.tsx

8/10

step-integration-tests/auto-pdpr-test-84794-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sasobadovinac/pytorch/.github/actions/upload-utilization-stats

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

step-security/github-app-token

Impersonate a GitHub App in a GitHub Action. Secure drop-in replacement for tibdex/github-app-token.

10/10

Maintained by StepSecurity

grafana/plugin-ci-workflows/actions/internal/plugins/publish/check-artifacts

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

nvidia-rtx/godot/.github/actions/godot-converter-test

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10

Maintained action available

step-security/github-action-aerospike/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

10/10

coveo/ui-kit/.github/actions/e2e-atomic-screenshots

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

yonasbsd/rspack/.github/actions/pnpm/public-layout.tsx

A fast Rust-based web bundler.

5/10

Maintained action available

gagoar/invoke-aws-lambda

GitHub action to invoke AWS lambda

3/10

nais/deploy/actions/deploy

Nais deploy: multi-cluster Kubernetes deployments

7/10

wei/git-sync

🔃 A GitHub Action for syncing between two independent repositories using force push

3/10

sonarsource/sonar-java-symbolic-execution/.actions/public-layout.tsx

Sonar Java symbolic execution plugin

6/10

firedancer-io/firedancer/.github/actions/cpusonline

Firedancer is Jump Crypto's Solana validator software.

5/10

Maintained action available

softprops/action-gh-release/_next/static/chunks/webpack-30ad75d8c88f588e.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10

Maintained action available

cloudposse/atmos/.github/actions/go-mod-download-retry

Atmos is the open-source runtime for infrastructure — it builds, authenticates, and ships Terraform, OpenTofu, Kubernetes, Helm, and containers the same way on your laptop, in CI, and with AI agents.

6/10

algesten/snowflake

2/10

step-security/linkinator-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action that checks your README and other markdown for 404s. Secure drop-in replacement for JustinBeckwith/linkinator-action.

10/10

step-security/wait-on-action/__builder_checkout_dir__/.github/actions/fill

A GitHub Action variant of the wait-on package (npmjs.com/package/wait-on). Secure drop-in replacement for iFaxity/wait-on-action.

10/10

peternied/check-pull-request-description-checklist

GitHub action ensuring that pull requests have a description

3/10