Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

tj-actions/remark

:octocat: Github action markdown processor https://github.com/remarkjs/remark

4/10

laverdet/remove-bloatware

3/10

homebrew/actions/create-pull-request

🚀 Homebrew's GitHub Actions

7/10

step-security/asdf-vm-actions/sidebar.tsx

GitHub Actions for the asdf version manager. Secure drop-in replacement for asdf-vm/actions.

10/10

jmuelbert/jm-reusable-scripts/.github/actions/python-setup

Reusable scripts for Python projects

5/10

vedantmgoyal9/winget-releaser

Publish new releases of your application to the Windows Package Manager easily.

4/10

sbimochan/jira-link-commenter

This action auto comments in pull request with Jira link to it.

2/10

pytorch/audio/test-infra/.github/actions/setup-windows

Data manipulation and transformation for audio signal processing, powered by PyTorch

2/10

jcbhmr/setup-wasmtime

👩‍💻 Wasmtime WebAssembly runtime installer for GitHub Actions

0/10

duplocloud/ghactions-service-update

Github action to update one or more services running in the DuploCloud platform

1/10

wangzuo/action-release-checksums

2/10

samuelcolvin/list-python-dependencies

GitHub action to list all valid versions of dependency for a Python project

2/10

game-ci/unity-builder

Build Unity projects for different platforms

8/10

consensys/github-actions/docs-build

Github Actions for Consensys projects

3/10

Maintained action available

button-inc/conn-ccbc-portal/.github/actions/dev-env-setup

Intake for application process for Connected Communities BC funding program

2/10

smartcontractkit/.github/actions/build-push-docker

reusable GHA workflows and actions

5/10

Maintained action available

aaimio/vercel-preview-url-action

Capture a Vercel preview URL and feed it into your next GitHub action.

2/10

cilium/little-vm-helper

tool for building and running VMs for development and testing

4/10

Maintained action available

step-security/sbom-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for creating software bill of materials using Syft. Secure drop-in replacement for anchore/sbom-action.

10/10

grafana/adaptive-metrics-autoapply/pull_recommendations

A template repository for enabling auto-apply of Adaptive Metrics recommendations

6/10