Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

sclorg/testing-farm-as-github-action

GitHub Action to execute tests by Testing Farm and update Pull Request status

4/10

Maintained action available

booxmedialtd/ws-action-parse-semver

GitHub action for parsing a tag following semantic versioning.

4/10

bufbuild/buf-push-action

4/10

onyxmueller/build-tag-number

Sequential build numbers for GitHub Actions workflows, stored as a Git tag - no extra commits.

5/10

Maintained action available

bigorno12/ci-cd-templates/.github/common

Centralized CICD

2/10

shopify/theme-check-action

Run shopify/theme-check on GitHub pull requests

3/10

step-integration-tests/auto-pdpr-test-01664-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

ledgerhq/ledger-live/tools/actions/composites/setup-e2e-test-desktop

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-06314-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/filter-sarif/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub Action for filtering Code Scanning alerts by path and id. Secure drop-in replacement for advanced-security/filter-sarif.

10/10

andremiras/coveralls-python-action

GitHub Action for Python Coveralls.io

4/10

home-assistant/actions/helpers/version-push

GitHub Actions for Home Assistant workflows

6/10

csm-actions/securefix-action/js

GitHub Action to fix code securely

5/10

Maintained action available

cardinalby/git-get-release-action

Github Action that allows you to get release information by release id, tag, commit SHA (current commit or specified).

3/10

Maintained action available

tempoxyz/changelogs

Universal Changelogs

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-61592-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

edera-dev/cross/.github/actions/cargo-llvm-cov

“Zero setup” cross compilation and “cross testing” of Rust crates

3/10

jupyter-server/jupyter-releaser/.github/actions/image

A set of helper scripts and GitHub Actions to aid in automated releases of Python and npm packages.

6/10

step-integration-tests/auto-pdpr-test-87792-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

paranoidbeing/action-wip-blocker

GitHub Action that blocks WIP PRs

2/10