Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

galargh/stale

Marks issues and pull requests that have not had recent interaction

2/10

yonasbsd/juicefs/.github/actions/mount-coverage-dir

JuiceFS is a distributed POSIX file system built on top of Redis and S3.

3/10

Maintained action available

github/accessibility-alt-text-bot

An action to remind users to add alt text on Issues, Pull Requests, and Discussions

9/10

actions-security-demo/pytorch/.github/actions/teardown-win

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/zentered-issue-forms-body-parser-action

Mirror from https://github.com/zentered/issue-forms-body-parser

1/10

Maintained action available

benjule/bambustudio/.github/actions/setup-gpg

BambuStudio fork with Linux packaging (AppImage, .deb, .rpm, Flatpak), CI/CD improvements and security hardening

6/10

metamask/cla-signature-bot

GitHub Action for self-contained handling of CLA signatures

3/10

cadwallion/publish-rubygems-action

2/10

opentofu/setup-opentofu

8/10

briansmith/actions-rs-toolchain

🛠️ GitHub Action for `rustup` commands

2/10

legoktm/gh-action-build-deb

GitHub Action for building Debian packages on Buster

3/10

googlecloudplatform/functions-framework-conformance/.github/actions/client/resolve-latest

A Tool for Validating Conformance to the Functions Framework Contract

3/10

pytorch/data/test-infra/.github/actions/fill

A PyTorch repo for data loading and utilities to be shared by the PyTorch domain libraries.

3/10

step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/fill

🛠️ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.

8/10

grafana/mimir-prometheus/.github/promci/actions/build

7/10

ozi-project/draft

OZI release draft workflow.

6/10

bmos/fg-forge-updater

Submits updated packages to the FantasyGrounds Forge

4/10

notdodo/erfiume_bot

Bot per leggere i livelli idrometrici dei fiumi dell'Emilia Romagna riportati da allertameteo.regione.emilia-romagna.it.

5/10

Maintained action available

yonasbsd/rocksdb/.github/actions/perform-benchmarks

A library that provides an embeddable, persistent key-value store for fast storage.

5/10

Maintained action available

astral-sh/setup-uv

Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/

7/10