Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

apple-actions/import-codesign-certs

GitHub Action for Importing Code-signing Certificates into a Keychain

8/10

step-security/setup-zig

Install a Zig compiler for usage in GitHub Actions workflows. Secure drop-in replacement for mlugg/setup-zig.

9/10

Maintained by StepSecurity

ethereum-optimism/factory/actions/extract-docker-digest

Github CI workflows to build artifacts securely

7/10

ericcornelissen/ghasum-testground/.github/actions/ghasum2

don't look a this, just testing the limits of gha

2/10

nodenv/actions/node-version

Leverage nodenv within GitHub Actions

4/10

step-security/clippy-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

🐻‍❄️📦 GitHub action to run Clippy, an up-to-date and modern version of actions-rs/clippy. Secure drop-in replacement for auguwu/clippy-action.

8/10

ritik-deriv/deriv-api-docs/.github/actions/test_build

Deriv API Documentation project

0/10

step-security/ansible-galaxy-action/__builder_checkout_dir/.github/actions/wp-content/uploads/2017/10/step-security/ansible-galaxy-action/builder_checkout_dir__/.github/actions

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

yonasbsd/iggy/.github/actions/csharp-dotnet/post-merge

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

3/10

Maintained action available

yeouchien/helm3-action

Github action for executing Helm 3 command. Can be used for Amazon EKS with aws-iam-authenticator

2/10

approved-3rd-party-actions/github-action-required-labels

Fail the build if/unless a certain combination of labels are applied to a pull request

2/10

ory/ci/docs/cli-next

Automation and robots for Ory's CI and CD pipelines

4/10

aerospike-community/spring-data-aerospike-starters/.github/actions/get-version

spring-data-aerospike-starters

5/10

Maintained action available

jasonetco/is-sponsor-label-action

💖🔖 A GitHub Action that labels issues/PRs if the author sponsors the owner of the repo

3/10

nvidia/nvsentinel/.github/actions/build-container

NVSentinel is a cross-platform fault remediation service designed to rapidly remediate runtime node-level issues in GPU-accelerated computing environments

8/10