Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

tomasreyes/maui/.github/actions/triage-ai-gen-prompt

.NET MAUI is the .NET Multi-platform App UI, a framework for building native device applications spanning mobile, tablet, and desktop.

7/10

step-security/github-actions-ensure-sha-pinned-actions/__builder_checkout_dir__/.github/actions/privacy-check

A Github Action to ensure that actions are pinned to full length commit SHAs. Secure drop-in replacement for zgosalvez/github-actions-ensure-sha-pinned-actions.

10/10

yonasbsd/vlang/.github/actions/cache-apt-packages-action

Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io

5/10

Maintained action available

boa-dev/criterion-compare-action

⚡️📊 Compare the performance of Rust project branches

4/10

surrealdb/surrealdb/.github/actions/quality-format

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

step-security/publish-unit-test-result-action/misc/action/json-output

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

8/10

Maintained by StepSecurity

maxnowack/local-cache

Github Action to provide caching data by placing a tarball on the local filesystem. Drop-in replacement for `actions/cache@v3`

2/10

caffeelake/localstack/.github/actions/setup-tests-env

💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline

1/10

mxcl/get-swift-version

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/viarise/setup-node

Fork of upstream: https://github.com/actions/setup-node

0/10

step-security/ghcr-cleanup-action

GitHub Container Registry Cleanup Action. Secure drop-in replacement for dataaxiom/ghcr-cleanup-action.

10/10

Maintained by StepSecurity

philips-software/amp-devcontainer/.github/actions/update-vscode-extensions

🔋amp-devcontainer is a batteries-included devcontainer useable for modern software development

7/10

yonasbsd/wazuh/.github/actions/public-layout.tsx

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

openzeppelin/ui-builder/.github/actions/public-layout.tsx

UI Builder is an open-source blockchain development tool that helps developers and non-developers create user-friendly interfaces for smart contract interaction by providing a chain-agnostic form builder that generates standalone "mini apps" without requiring backend infrastructure.

6/10