Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

lfreleng-actions/python-build-action

Performs a set of Python matrix build jobs

8/10

werf/actions/image

Set of actions for implementing CI/CD with werf and GitHub Actions

2/10

eliashaeussler/gha/.github/actions/composer-checks

🌈 Reusable GitHub Actions and Workflows for use in my personal projects

6/10

softprops/action-gh-release/_next/static/chunks/app/(public)/action-advisor/%5b...action%5d/page-7c2bf5685f228544.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10

Maintained action available

step-security/github-action-aerospike

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

10/10

Maintained by StepSecurity

jackmckew/pyinstaller-action-windows

Github Action for building executables with Pyinstaller

4/10

pactflow/actions/fill

GitHub Actions to perform common Pact & Pactflow commands

5/10

Maintained action available

coveo/plasma/.github/actions/deploy

Plasma components implemented with React!

7/10

dustin4444/gui/.github/actions/configure-docker

Bitcoin Core GUI staging repository

5/10

Maintained action available

step-security/sbom-action/image

GitHub Action for creating software bill of materials using Syft. Secure drop-in replacement for anchore/sbom-action.

9/10

step-integration-tests/auto-pdpr-test-61552-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

tempoxyz/gh-actions/vendor/docker/setup-qemu-action

Reusable GitHub Actions for Tempo

4/10

Maintained action available

advanced-security/codeql-development-toolkit/.github/actions/install-qlt

The CodeQL Development toolkit is a tool for making common CodeQL development workflows easier.

7/10

launchdarkly/php-server-sdk-redis-predis/.github/actions/public-layout.tsx

Redis integration for the LaunchDarkly SDK for Server-side PHP using predis

4/10

step-security/secrets-sync-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

A Github Action that can sync secrets from one repository to many others. Secure drop-in replacement for jpoehnelt/secrets-sync-action.

10/10

andife/openvino/.github/actions/smart-ci

OpenVINO™ is an open source toolkit for optimizing and deploying AI inference

3/10

jonasalfredsson/checkout-qemu-buildx

GitHub Action which checkout the repository and configures QEMU and Docker Builx for all available architectures.

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-54754-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

philips-software/amp-devcontainer/.github/actions/container-size-diff

🔋amp-devcontainer is a batteries-included devcontainer useable for modern software development

7/10

step-security/dsanders11-project-actions/github-script

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10

Maintained by StepSecurity