Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/envsubst-action/__builder_checkout_dir__/.github/actions/privacy-check
Github Action for envsubst. Secure drop-in replacement for danielr1996/envsubst-action.
coinbase/cb-mpc/vendors/github-action-benchmark
Coinbase MPC Library
camunda/infra-global-github-actions/fossa/public-layout.tsx
Small Github Actions maintained by Infra team and used by other teams inside Camunda
suzuki-shunsuke/commit-action/js
GitHub Action to push changes to remote branches by GitHub API. You can create verified commits using GitHub App.
step-security/conditional-build-matrix/__builder_checkout_dir__/.github/actions/privacy-check
A GitHub Action that enables easier conditional matrix builds!. Secure drop-in replacement for JoshuaTheMiller/conditional-build-matrix.
sasobadovinac/tldraw/.github/actions/setup
whiteboard / infinite canvas SDK
zg9vfpp47z-dotcom/agent-governance-toolkit/.github/actions/contributor-check
AI Agent Governance Toolkit โ Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
cyber-dojo/download-artifact
Composite workflow to download a docker image created by reusable-actions-workflows' secure-docker-build workflow.
step-security/super-linter/public-layout.tsx
Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.
deepcode-ai/codeql/codeql/.github/actions/fetch-codeql
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
technote-space/assign-author
GitHub Actions to assign author to issue or PR
dustin4444/react-native/.github/actions/prepare-ios-tests
A framework for building native applications using React
rapidsai/shared-actions/shared-actions/telemetry-impls/stash-job-artifacts
grafana/grafana/.github/actions/yarn-install
The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
hashicorp/tfc-workflows-github/actions/create-run
HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.
step-integration-tests/auto-pdpr-test-61883-13/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
ministryofjustice/devsecops-actions/sca/moj
A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.
tchupp/actions-detect-directory-changes
deriv-com/shared-actions/.github/actions/post_preview_link_comment
This repository is dedicated to hosting reusable GitHub Actions YAML files that can be shared across different repositories.
amplify-security/runner-action
Github Action to run Amplify Security's scanner orchestrator.