Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ministryofjustice/hmpps-probation-integration-services/.github/actions/public-layout.tsx

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

coveord/spinnaker/.github/actions/build-tag-number

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

anchore/chronicle/.github/actions/wait-for-check

a fast changelog generator sourced from PRs and Issues

6/10

raycast/github-actions/fill

3/10

Maintained action available

aerospike/spring-data-aerospike/.github/actions/fill

Spring Data Aerospike

7/10

zwaldowski/semver-release-action

Create the next semantic version and tag it.

0/10

matmair/inventree/.github/actions/setup

Open Source Inventory Management System

7/10

step-security/mage-action

GitHub Action for Mage. Secure drop-in replacement for magefile/mage-action.

10/10

Maintained by StepSecurity

launchdarkly/go-sdk-common/.github/actions/coverage

Basic types for LaunchDarkly Go SDK components

4/10

cloudposse/github-action-docker-build-push

Simple docker build action

5/10

pytorch/hub/test-infra/.github/actions/chown-directory

Submission to https://pytorch.org/hub/

2/10

coveo/ui-kit/.github/actions/playwright-quantic

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

step-security/gh-actions-lua/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action for Lua/LuaJIT. Secure drop-in replacement for leafo/gh-actions-lua.

10/10

metamask/action-create-release-pr

6/10

warjiang/setup-skopeo

A GitHub Action for installing and configuring the skopeo CLI.

3/10

Maintained action available

github/gh-aw/actions/setup

GitHub Agentic Workflows

7/10

wardnet/cubit

Continuous benchmarking and performance-regression tracking. Runs benchmarks, records baselines in a git branch, renders trend dashboards, and posts non-blocking baseline-vs-PR comparisons.

2/10

sonarsource/sonar-java/.actions/get-build-number

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

4/10

Maintained action available

grafana/plugin-ci-workflows/actions/plugins/docs/test.md

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10

step-security/terraform-composite-actions/__builder_checkout_dir__/.github/actions/privacy-check

Contains composit GitHub actions for use with Terraform AWS Module workflows. Secure drop-in replacement for clowdhaus/terraform-composite-actions.

10/10