Assess the risk of third-party GitHub Actions

ethereum-optimism/factory/actions/detect-changes

Github CI workflows to build artifacts securely

7/10

elastic/apm-pipeline-library/.github/actions/docker-layer-caching

Maintained by StepSecurity

step-security/sbom-action/publish-sbom

GitHub Action for creating software bill of materials using Syft. Secure drop-in replacement for anchore/sbom-action.

10/10

anz-bank/pkg/.github/action/github-tag-action

Common ANZ Go packages

approved-3rd-party-actions/hashicorp-setup-terraform

Sets up Terraform CLI in your GitHub Actions workflow.

ministryofjustice/hmpps-approved-premises-ui/.github/actions/slack_failure_notification

The user interface for the Approved Premises Service

8/10

rasahq/rasa-helm-charts/.github/actions/check-chart-rc

Helm Charts Packaging and Distribution

8/10

clj-holmes/clj-watson-action

clj-watson action

lerebear/sizeup-action

Encourage digestible pull requests

3/10

lfreleng-actions/python-dynamic-version-action

Checks if dynamic versioning is enabled in pyproject.toml

sozercan/kaito/.github/actions/build-image-action

Kubernetes AI Toolchain Operator

step-security/claude-code-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Secure drop-in replacement for anthropics/claude-code-action.

10/10

pytorch/test-infra/.github/actions/setup-ssh

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

tanker187/stagehand/.github/actions/upload-ctrf-report

The AI Browser Automation Framework

5/10

openzeppelin/openzeppelin-ui/../__tool_action_dir__

OpenZeppelin UI - React components and utilities for blockchain applications