Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/secure-download-artifact
Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.
testifysec/witness-run-action
kolide/expo-fork/.github/actions/use-android-emulator
Our fork of expo
step-security/install-datadog-ci-github-action
Secure drop-in replacement for DataDog/install-datadog-ci-github-action.
iwamot/actions/go-publish
iwamot's shared GitHub Actions composite actions.
hashicorp/tfc-workflows-github/actions/apply-run
HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.
yonasbsd/pest/.github/actions/%5c%5c%5c%22https%3a/blog.rust-lang.org/2024/11/28/rust-1.83.0/%5c%5c%5c%22%5cu003e%5cu003cimg
The Elegant Parser
step-security/release-downloader
Github action to download release assets from private or public repositories. Secure drop-in replacement for robinraju/release-downloader.
launchdarkly/gha-ld-gosec
Runs gosec then uploads results to s3 and workflow artifacts.
step-security/action-openfga-test
Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.
meilcli/gradle-update-check-action
gradle maven new package version check action for GitHub Actions.
richardmcsong/actions/pr-sync
Custom actions for automating Backstage workflows
githubnext/gh-aw/actions/setup
GitHub Agentic Workflows
quotidian-ennui/actions-olio/commit-status-and-label
It's a gallimaufry of actions
ministryofjustice/hmpps-probation-integration-services/.github/actions/database-access-new
A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.
nvidia/nvsentinel/.github/actions/install-e2e-tools
NVSentinel is a cross-platform fault remediation service designed to rapidly remediate runtime node-level issues in GPU-accelerated computing environments
aerospike/aerospike-client-c/.github/actions/generate-release-notes
Aerospike C Client
tue-robotics/tue-env/ci/fill
Package manager that can be used to install (ROS) dependencies
docker/bake-action/ui13c5/list-targets
GitHub Action to use Docker Buildx Bake as a high-level build command
step-security/docker-build-push-action/_next/static/chunks/85591-a2d94b5591140a6d.js
GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.