Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

febiosoftware/febio-workflows/.github/actions/get-sdk

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

3/10

Maintained action available

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/docker-setup-buildx-action

Mirror from https://github.com/docker/setup-buildx-action

1/10

Maintained action available

approved-3rd-party-actions/likec4

A Github Action for various operations and automation over LikeC4 projects

2/10

devantler-tech/ksail/.github/actions/ksail-test-backup-restore

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10

Maintained action available

sonarsource/sonar-scala/.actions/get-build-number

Scala analyzer

6/10

ministryofjustice/laa-submit-a-bulk-claim/.github/actions/extract_release_name_from_branch

Web application for bulk upload of claims data

8/10

bcgov/action-get-pr

Get PR number for merge and queue events

5/10

Maintained action available

morishiri/block-merge-commits-action

A Github Action to prevent merging pull requests containing merge commits.

2/10

cariad-tech/merge-queue-ci-skipper

3/10

yonasbsd/grafana/pkg/build/actions/bump-version

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10

Maintained action available