Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

zavoloklom/shields/.github/actions/setup

Concise, consistent, and legible badges in SVG and raster format

3/10

yonasbsd/opendal/.github/actions/fill

Apache OpenDAL: access data freely.

5/10

Maintained action available

tryghost/label-actions

Tools for managing Ghost's OSS repositories

4/10

yonasbsd/buck2/.github/actions/setup_macos_env

Build system, successor to Buck

3/10

Maintained action available

c-hive/gha-remove-artifacts

GitHub Action to customize artifact cleanup

3/10

project-dalec/dalec/.github/actions/dns-spoof-ubuntu-archive

📦 Produce secure packages and containers with declarative configurations

6/10

vemel/nextchange

Parse and update CHANGELOG.md action

2/10

surrealdb/rocksdb/.github/actions/setup-folly

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

inception-health/otel-export-trace-action

2/10

grafana/mimir-prometheus/.github/promci/actions/check_proto

7/10

tannergolden/standards/actions/apply-rulesets

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, scanning, releases, and a shared label taxonomy.

5/10

step-security/install-datadog-ci-github-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for DataDog/install-datadog-ci-github-action.

10/10

step-security/alls-green

A check for whether the dependency jobs are all green. Secure drop-in replacement for re-actors/alls-green.

10/10

Maintained by StepSecurity

step-security/lcov-reporter-action

Comments a pull request with the code coverage generated by your tests. Secure drop-in replacement for romeovs/lcov-reporter-action.

8/10

Maintained by StepSecurity

benc-uk/workflow-dispatch

A GitHub Action for triggering workflows, using the `workflow_dispatch` event

5/10

xaviermp14/copilot-sdk/.github/actions/java-test-report

Multi-platform SDK for integrating GitHub Copilot Agent into apps and services

3/10

szhekpisov/gomutants

A fast mutation testing tool for Go.

7/10

gregclermont/tinybpf/.github/actions/build-ebpf

Minimal Python library for loading CO-RE eBPF programs

5/10

Maintained action available

project-copacetic/copa-action

:octocat: GitHub Action for Copacetic: Directly patch container image vulnerabilities

4/10

step-security/workflow-dispatch/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action for triggering workflows, using the `workflow_dispatch` event. Secure drop-in replacement for benc-uk/workflow-dispatch.

10/10