Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

lfreleng-actions/pypi-publish-action

Publishes a Python project to the Python Package Index (PyPI)

4/10

Maintained action available

yonasbsd/wazuh/.github/actions/5_builderpackage_windows-smoke-upgrade-test

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

gr2m/get-json-paths-action

A GitHub Action to access deep values of JSON strings

2/10

azure/bicep-build-action

GitHub Action for building an ARM Template from Bicep

5/10

pytorch/fbgemm/test-infra/.github/actions/setup-binary-builds

FB (Facebook) + GEMM (General Matrix-Matrix Multiplication) - https://code.fb.com/ml-applications/fbgemm/

2/10

Maintained action available

grafana/redshift-datasource/actions/public-layout.tsx

7/10

cisagov/setup-go-package

Composite GitHub action to install a Go package.

8/10

orhun/cargo-semver-checks-action

A GitHub Action for running cargo-semver-checks

2/10

approved-3rd-party-actions/branch-protection

0/10

yonasbsd/wazuh/.github/actions/build_target_cpp

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

launchdarkly/ld-relay/.github/actions/publish

LaunchDarkly Relay Proxy

5/10

Maintained action available

nicholas-fedor/actionlint-action

GitHub Action for rhysd/actionlint

6/10

launchdarkly/erlang-server-sdk/.github/actions/ci

LaunchDarkly Server-Side SDK for Erlang/Elixir

5/10

atos-actions/get-playwright-version

Extracts and outputs the Playwright version from a project's lockfile

4/10

Maintained action available

anchore/workflows/.github/actions/bootstrap

reusable workflows to be used for the oss projects

8/10

shivammathur/setup-php

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

10/10

approved-3rd-party-actions/action-get-release

Get a Github release

2/10

sonarsource/sync-jira-github-action

Change status of JIRA tickets when opening and merging pull requests

3/10

modeseven-lfreleng-actions/tag-validate-action

Process and validate Git tags, check signing type/status

4/10

Maintained action available

jgillis/variable-mapper

Github Action for mapping variables by a specific key

2/10