Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

bubkoo/auto-comment

💬 Automatically comment issues or PRs on events triggered

2/10

stacklet/superset/.github/actions/pr-lint-action

Apache Superset is a Data Visualization and Data Exploration Platform

6/10

aquaproj/aqua-installer

Install aqua securely and quickly

6/10

jessehouwing/actions-example-checker

Ensures examples match implementation

4/10

yonasbsd/tempo/actions/metrics-collector

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

2/10

marknsweep/kroxylicious/.github/actions/common/setup-java

Kroxylicious, the snappy open source proxy for Apache Kafka®

2/10

coveo/plasma/.github/actions/cleanup-demo

Plasma components implemented with React!

7/10

step-security/action-suggester/__builder_checkout_dir__/.github/actions/privacy-check

:dog: Suggests any code changes based on diff through GitHub Multi-line code suggestions by using reviewdog. Secure drop-in replacement for reviewdog/action-suggester.

10/10

coveo/ui-kit/.github/actions/playwright-atomic-theming

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

step-security/allure-report-action

Allure Report action with history. Secure drop-in replacement for simple-elf/allure-report-action.

10/10

Maintained by StepSecurity

grafana/issue-team-scheduler/action-info.client.tsx

4/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/uploads/2019/5

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

crate-ci/typos

Source code spell checker

7/10

kong/semantic-release-action

GitHub Action for Semantic Release

2/10

pytorch/audio/.github/actions/test-abi3-wheel

Data manipulation and transformation for audio signal processing, powered by PyTorch

3/10

Maintained action available

cloudposse/github-action-atmos-terraform-apply

Atmos Terraform Apply

5/10

launchdarkly/dotnet-eventsource/.github/actions/public-layout.tsx

Server-sent events (SSE) client implementation for .NET

6/10

step-security/install-yq-action

Install YQ into the action tool cache without needing nodejs. Secure drop-in replacement for dcarbone/install-yq-action.

10/10

Maintained by StepSecurity

step-security/xcodebuild

A continuously resilient `xcodebuild` “GitHub Action”. Also it’s the best. Secure drop-in replacement for mxcl/xcodebuild.

10/10

Maintained by StepSecurity

lando/code-sign-action

A GitHub action to code sign files

4/10