Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

ministryofjustice/laa-data-access-api/.github/actions/cleanup_branch

7/10

benbristow/dokploy-deploy-action

3/10

chick-fil-a/gha-docker-run

A GitHub Action to run a docker container with current workspace mapped and github actions env vars available.

2/10

mcdonnnj/actions-permissions/monitor

GitHub token permissions Monitor and Advisor actions

2/10

ministryofjustice/laa-secure-document-storage-api/.github/actions/fill

A repository containing the API for the LAA shared component for secure document storage

7/10

eliheady/dnscontrol-action-experimental

4/10

devantler-tech/actions/sync-github-labels

Actions designed to streamline CI/CD processes.

4/10

Maintained action available

step-security/run-report-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub action for displaying a run report within a pull request. Secure drop-in replacement for moonrepo/run-report-action.

10/10

step-security/install-jq-action

Multiplatform jq installer action. Secure drop-in replacement for dcarbone/install-jq-action.

10/10

Maintained by StepSecurity

step-security/ssh-key-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

8/10

argoproj/argo-rollouts/__builder_checkout_dir__/.github/actions/privacy-check

Progressive Delivery for Kubernetes

5/10

Maintained action available

jbutcher5/read-yaml

A GitHub Action to read yaml files.

2/10

cx-ciso/ast-github-action

Checkmarx application security testing (AST) GitHub action

3/10

matlab-actions/run-tests

Run MATLAB and Simulink tests and generate artifacts.

5/10

Maintained action available

abronin/ecr-retag-action

:octocat: GitHub Action to retag existing Docker image in AWS ECR

2/10

pantos-io/ci-workflows/.github/actions/fill

Collection of CI actions used by Pantos

4/10

ministryofjustice/opg-reports/.github/actions/terraform

Development repository: Managed by opg-org-infra & Terraform

8/10

nvidia/aicr/.github/actions/go-test

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

6/10

commit-check/commit-check-action

Commit Check GitHub Action

8/10

step-security/setup-just/__builder_checkout_dir__/.github/actions/secure-download-artifact

🤖 GitHub Action to install the just command runner. Secure drop-in replacement for extractions/setup-just.

10/10