Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

namespacelabs/nscloud-setup

2/10

step-security/action-discord/__builder_checkout_dir__/.github/actions/secure-download-artifact

🚀 GitHub Action that sends a Discord message. . Secure drop-in replacement for Ilshidur/action-discord.

10/10

step-security/cancel-action

Secure drop-in replacement for andymckay/cancel-action.

8/10

Maintained by StepSecurity

fern-api/setup-fern-cli

A GitHub Action that installs the Fern CLI into a workflow using npm.

3/10

colpal/actions-clean

A Github Action to clean the workspace on a self-hosted runner

3/10

tree-sitter/setup-action/cli

Setup action for the tree-sitter library & CLI

4/10

gauthamchandra/mvnd-action

For using the Maven Daemon in Github Actions

2/10

yuya-takeyama/monotonix/actions/filter-jobs-by-changed-files

Make deployment monotonous

5/10

Maintained action available

jetbrains/resharper-inspectcode

C# static analysis on GitHub Actions using JetBrains ReSharper InspectCode.

3/10

Maintained action available

redhat-plumbers-in-action/differential-shellcheck

🐚 GitHub Action for running ShellCheck differentially

6/10

slsa-framework/slsa-github-generator/.github/actions/secure-upload-folder

Language-agnostic SLSA provenance generation for Github Actions

4/10

equinor/procosys-js-frontend/.github/actions/pnpm-setup

Frontend javascript application for Project Completion System (ProCoSys)

5/10

modeseven-lfreleng-actions/python-test-action

Tests a Python project and generates coverage reports

5/10

Maintained action available

step-security/docker-build-push-action/_next/static/chunks/f1bddbd1-5d3ff97ddef46c28.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10

step-security/setup-msbuild/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications. Secure drop-in replacement for microsoft/setup-msbuild.

8/10

canonical/get-workflow-version-action

(deprecated) GitHub action to get commit SHA that GitHub Actions reusable workflow was called with

3/10

tj-actions/glob

:octocat: Github action to match glob patterns with support for matching deleted files.

2/10

step-security/action-download-artifact/__builder_checkout_dir__/.github/actions/privacy-check

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

8/10

launchdarkly/ios-client-sdk/.github/actions/build-watchos

LaunchDarkly Client-side SDK for iOS (Swift and Obj-C)

6/10

step-security/github-app-auth-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for electron/github-app-auth-action.

10/10