Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/workflow-performance-monitor/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for ke-kawai/workflow-performance-monitor.

10/10

step-security/action-tflint

Run tflint with reviewdog on pull requests to enforce best practices. Secure drop-in replacement for reviewdog/action-tflint.

10/10

Maintained by StepSecurity

jahid11978/openclaw-jahid.ai/.ci-harness/.github/actions/setup-pnpm-store-cache

jahid

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-02568-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

yepcode/gha-copy-team

GitHub Action that copies all the contents from the current git repository to one YepCode remote team.

3/10

slsa-framework/slsa-github-generator/.github/actions/detect-workflow

Language-agnostic SLSA provenance generation for Github Actions

4/10

mxcl/xcodebuild

A continuously resilient `xcodebuild` “GitHub Action”. Also it’s the best.

1/10

vexxhost/chart-vendor/fill

Tool for vendoring Helm charts into a Git repository

4/10

Maintained action available

netlify/actions/cli

6/10

octodemo-resources/github-url-resolver-action

GitHub Action to resolve URLs that are associated with a specific GitHub instance

3/10

dagster-io/dagster-cloud-action/actions/utils/prerun

5/10

natiginfo/action-detekt-all

Run Detekt static analysis in GitHub Actions with configurable Detekt and Java versions.

3/10

nvidia/nvmath-python/.github/actions/get_pr_number

NVIDIA Math Libraries for the Python Ecosystem

6/10

step-security/install-poetry/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github action for installing and configuring Poetry. Secure drop-in replacement for snok/install-poetry.

10/10

step-security/setup-protoc/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to setup the protoc compiler for protocol buffers. Secure drop-in replacement for arduino/setup-protoc.

8/10

grafana/setup-k6-action

GitHub Action for installing Grafana k6

6/10

step-integration-tests/auto-pdpr-test-15640-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

kong/gh-storage/download

Use a GitHub hosted repository to store and retrieve files

3/10

bridgecrewio/yor-action

Github action for Yor

2/10

dustin4444/electron/src/electron/.github/actions/checkout

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

5/10

Maintained action available