Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

envoyproxy/toolshed/actions/oci/collector

step-security/workflow-telemetry-action/__builder_checkout_dir__/.github/actions/fill

Github action to collect metrics (CPU, memory, I/O, etc ...) from your workflows to help you debug and optimize your CI/CD pipeline. Secure drop-in replacement for catchpoint/workflow-telemetry-action.

10/10

grafana/plugin-ci-workflows/actions/internal/plugins/backend

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

step-security/upload-cloud-storage

A GitHub Action for uploading files to a Google Cloud Storage (GCS) bucket. Secure drop-in replacement for google-github-actions/upload-cloud-storage.

10/10

Maintained by StepSecurity

step-security/checkov-action/__builder_checkout_dir__/.github/actions/privacy-check

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues. Secure drop-in replacement for bridgecrewio/checkov-action.

10/10

sasobadovinac/occt/.github/actions/download-vcpkg-cache

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

3/10

servicenow/sncicd-tests-run

2/10

nvidia/nvmath-python/.github/actions/sccache-summary

NVIDIA Math Libraries for the Python Ecosystem

6/10

pulumi/actions/preview

Deploy continuously to your cloud of choice, using your favorite language, Pulumi, and GitHub!

5/10

Maintained action available

grafana/plugin-ci-workflows/actions/internal/plugins/docs/test

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

swiftylab/ci

Support files and configurations for SwiftyLab's CI

2/10

citypaul/build-number

A github action to addd a base value to GITHUB_RUN_NUMBER

3/10

yonasbsd/bun/.github/actions/public-layout.tsx

Incredibly fast JavaScript runtime, bundler, transpiler and package manager – all in one.

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-20915-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/cocogitto-action

A github action to ensure your current gitlog respect the conventional commit specification. Secure drop-in replacement for cocogitto/cocogitto-action.

10/10

Maintained by StepSecurity

step-security/unity-builder/__builder_checkout_dir__/.github/actions/secure-download-artifact

Build Unity projects for different platforms. Secure drop-in replacement for game-ci/unity-builder.

8/10

step-security/test-results-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for codecov/test-results-action.

10/10

yonasbsd/sccache/.github/actions/rust-toolchain

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

3/10

Maintained action available

step-security/setup-qemu-action/_next/static/chunks/17477-d10d29d258388a52.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

9/10

openzeppelin/ui-builder/.github/actions/fill

UI Builder is an open-source blockchain development tool that helps developers and non-developers create user-friendly interfaces for smart contract interaction by providing a chain-agnostic form builder that generates standalone "mini apps" without requiring backend infrastructure.

6/10