Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

julie-ng/lowercase-linter

GitHub Action to ensure files are lower case only. Suggests valid names in kebab-case format.

2/10

git-hub-chris/visualstudiocode/actions/copycat

Microsoft Visual Studio Code.

6/10

udlose/aspnetcore/actions/locker

ASP.NET Core is a cross-platform .NET framework for building modern cloud-based web applications on Windows, Mac, or Linux.

6/10

secureblue/secureblue/__builder_checkout_dir__/.github/actions/compute-sha256

A security-focused desktop and server linux operating system.

8/10

microsoft/setup-msbuild

A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.

6/10

little-core-labs/get-git-tag

A GitHub action that gets current tag name and puts it into an environment variable. Maintained fork

4/10

lando/notarize-action

A GitHub action to Apple notarize files. Originally adapted from https://github.com/devbotsxyz/xcode-notarize

3/10

lidofinance/linters/.github/actions/lint-security

3/10

codex-/knip-reporter

⚙️📄 Report the results from knip on pull requests

2/10

Maintained action available

step-security/list-files-action

GitHub action to list path of all files of a particular extension in the folder/directory specified by the user. Secure drop-in replacement for mirko-felice/list-files-action.

10/10

Maintained by StepSecurity

openzeppelin/openzeppelin-adapters/.github/actions/prepare

OpenZeppelin Ecosystem Adapters are a set of modular, chain-specific integration packages that bridge the gap between blockchain ecosystems and developer tooling.

1/10