Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

timschoenle/actions/actions/helm/update-chart-version

Composite and Node GitHub Actions, reusable workflows and shared Renovate presets, each released under its own tag.

7/10

pytorch/test-infra/.github/actions/image

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10

Maintained action available

step-security/setup-qemu-action/_next/static/chunks/28513-d176af46a7084b66.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

8/10

step-integration-tests/auto-pdpr-test-97098-8/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

metamask/github-tools/.github/actions/update-release-changelog

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

5/10

Maintained action available

dovel-pr17-validation/pr17r13-nuget-gitversion/.github/actions/cache-restore

Dovel r13 test mirror of GitTools/GitVersion (temporary)

5/10

clickhouse/checkout

Wrapper around actions/checkout for flexible tuning

4/10

aerospike/aerospike-jdbc/.github/actions/image

Minimalist JDBC driver for Aerospike

6/10

jianlins/llama.cpp/.github/actions/windows-setup-cuda

LLM inference in C/C++

3/10

openai/openai-python/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

The official Python library for the OpenAI API

7/10

grafana/plugin-ci-workflows/actions/plugins/docs/publish

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

ministryofjustice/laa-data-claims-reporting-service/.github/fill

Java service to generate claims reports

8/10

grafana/shared-workflows/actions/trigger-argo-workflow

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

dustin4444/gemini-cli/.github/actions/create-pull-request

An open-source AI agent that brings the power of Gemini directly into your terminal.

7/10

grafana/community-contributions/.github/actions/external-pr-validation/post-validation-comment

External contributor PR workflow testing sandbox

2/10

step-security/sccache-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

sccache github action. Secure drop-in replacement for Mozilla-Actions/sccache-action.

10/10

anomalyco/opencode

The open source coding agent.

6/10

jahid11978/openclaw-jahid.ai/workflow/.github/actions/image

jahid

4/10

Maintained action available

danger/swift

⚠️ Stop saying "you forgot to …" in code review

5/10

Maintained action available

erpc/erpc

eRPC — fault-tolerant evm rpc proxy

4/10

Maintained action available