Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/publish-unit-test-result-action/windows/bash

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

8/10

Maintained by StepSecurity

yonasbsd/neon/.github/actions/upload

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

2/10

vladopajic/go-test-coverage/action/source

go-test-coverage is a tool designed to report issues when test coverage falls below a specified threshold

4/10

Maintained action available

comunidadaylas/packsquash-action

▶️ Action to run PackSquash in a GitHub Actions workflow.

6/10

snyk/actions/public-layout.tsx

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

yonasbsd/tempo/actions/backport

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

4/10

Maintained action available

step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/privacy-check

:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.

10/10

launchdarkly/react-client-sdk/.github/actions/publish-npm

LaunchDarkly Client-side SDK for React.js

4/10

Maintained action available

doyensec/electronegativity-action

The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

2/10

sonarsource/release-github-actions/create-jira-version

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

5/10

Maintained action available