Assess the risk of third-party GitHub Actions

cclauss/github-action-for-pytest

A GitHub Action to run a pytest command when new code is pushed into your repo

3/10

step-integration-tests/auto-pdpr-test-56791-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

approved-3rd-party-actions/sticky-pull-request-comment

create comment on pull request, if exists update that comment.

step-security/asdf-vm-actions/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Actions for the asdf version manager. Secure drop-in replacement for asdf-vm/actions.

10/10

flanksource/action-workflows/actions/free-disk-space

3/10

nvidia/openshell-research/tooling/.github/actions/fill

🧪 OpenShell's Research Journal

wei/curl

Wraps the curl CLI to be used in Github Actions

verity-org/verity/.github/actions/upload-pages-artifact

angular/dev-infra/github-actions/labeling/issue

Angular Development Infrastructure

6/10

flathub-infra/flatpak-github-actions/fill

0/10

yonasbsd/quickwit/.github/actions/cross-build-binary

Sub-second search & analytics engine on cloud storage

5/10

devantler-tech/ksail/.github/actions/restore-helm-cache

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10

step-security/setup-vals/__builder_checkout_dir__/.github/actions/public-layout.tsx

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

launchdarkly/cpp-sdks/.github/actions/cmake-test

C++ Client/Server SDKs

6/10

step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/fill

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

8/10

tonybaloney/pycharm-security

Finds security holes in your Python projects from PyCharm and GitHub

goccy/tobari-action/image

GitHub Actions for Tobari

wearerequired/lint-action

✨ GitHub Action for detecting and auto-fixing lint errors

5/10

yonasbsd/dragonfly/.github/actions/regression-tests

A modern replacement for Redis and Memcached