Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia/nautobot-app-nvdatamodels/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

A Nautobot plugin which provides data models for NVIDIA products

5/10

mercari/actions-runner-controller/.github/actions/execute-assert-arc-e2e

Kubernetes controller for GitHub Actions self-hosted runners

4/10

tanker187/playwright/.github/actions/run-test

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

4/10

saleor/saleor-internal-actions/sbom-generator

Collection of GitHub Actions used internally at Saleor

8/10

anothrnick/github-tag-action

A Github Action to tag a repo on merge.

6/10

home-assistant/builder/actions/build-image

Home Assistant builder script

7/10

dargon789/hardhat/.github/actions/setup-env

Hardhat is a development environment to compile, deploy, test, and debug your Ethereum software.

4/10

Maintained action available

rustsec/audit-check

🛡️ GitHub Action for security audits

4/10

bots-house/ghcr-delete-image-action

♻️ Delete GitHub Container Registry image by tag

3/10

sonarsource/sonar-flex/.actions/get-build-number

6/10

flatt-security/setup-takumi-guard-npm

GitHub Action to configure npm/yarn/pnpm etc. with Takumi Guard registry

5/10

step-security/s3-actions-cache/__builder_checkout_dir__/.github/actions/privacy-check

Cache to S3 storage with official actions/cache@v2 fallback. Secure drop-in replacement for tespkg/actions-cache.

10/10

elastic/elastic-otel-dotnet/.github/workflows/bootstrap

Elastic OpenTelemetry .NET Distribution

8/10

celfons/agents-default-actions-template/.github/actions/language-detect

4/10

step-security/create-pull-request/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

step-security/dynamodb-actions/__builder_checkout_dir__/.github/actions/secure-download-artifact

Integrate Github Action with Amazon DynamoDB. Secure drop-in replacement for mooyoul/dynamodb-actions.

10/10

step-security/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities. Secure drop-in replacement for aquasecurity/trivy-action.

6/10

chainguard-dev/actions/setup-eksctl

A collection of reusable Github Actions workflows.

8/10

dallemon/images/.github/actions/verify-readme

Public Chainguard Images

3/10

step-security/runs-on-cache/save

Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.

10/10

Maintained by StepSecurity