Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

yonasbsd/grafana/.github/actions/setup-node

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

2/10

Maintained action available

oprypin/find-latest-tag

GitHub Action: Find the latest tag in a GitHub repository

4/10

adriangonz97/refined-cf-pages-action

2/10

suzuki-shunsuke/tfaction/list-targets

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

5/10

Maintained action available

nvidia/dsx-github-actions/.github/actions/trufflehog-scan

Github Action infrastructure for DSX

8/10

sonarsource/sonar-java-jdt/.actions/get-build-number

Packaging of Eclipse's Java Development Tools for SonarJava

6/10

politicalsphere/ci/.github/actions/ps-lint-tools

CI/CD pipelines and GitHub Actions for Political Sphere

3/10

Maintained action available

nx1x/cloudflare-warp-action/cleanup

Headless Cloudflare WARP enrollment for GitHub Actions runners. Full network access via your Zero Trust org.

6/10

lucacome/draft-release

Draft the next GitHub release

6/10

nvidia/spark-rapids-common/shell-check

Reusable GitHub Actions workflows and common scripts for Spark RAPIDS

5/10

panva/node/.github/actions/install-clang

Node.js JavaScript runtime :sparkles::turtle::rocket::sparkles:

4/10

Maintained action available

jsoref/image

Work with containers' images

3/10

step-security/jest-coverage-action-demo/.github/actions/test

9/10

sonarsource/sonarlint-language-server/.actions/get-build-number

Language Server for SonarQube for VSCode

7/10

ministryofjustice/laa-data-claims-api/.github/actions/deploy

LAA Data Claims API

8/10

ethlimo/ens-hooks/.github/actions/sbom

TypeScript library for encoding, decoding, and executing EIP-8121 hooks with ERC-7930 interoperable addresses

2/10

deepcode-ai/llama.cpp/.github/actions/windows-setup-curl

Port of Facebook's LLaMA model in C/C++

5/10

Maintained action available

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/cloud-platform-auth

Github actions for HMPPS projects

6/10

yonasbsd/wazuh/.github/actions/4_operational_prerelease_coverity_issue

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

mattermost/action-mattermost-notify

GitHub Action for sending a notification to a Mattermost channel

3/10