Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia/pytorch-windows-ci/oot/.github/actions/woa-preflight-build

Out of tree repo to run pytorch CI tests on Nvidia GPUs for Windows

4/10

step-security/action-swiftlint/__builder_checkout_dir__/.github/actions/fill

GitHub Action for SwiftLint. Secure drop-in replacement for norio-nomura/action-swiftlint.

10/10

elastic/ci-gh-actions/with-post-step

4/10

Maintained action available

angular/dev-infra/github-actions/labeling/pull-request

Angular Development Infrastructure

6/10

ministryofjustice/modernisation-platform-github-actions/setup-container-structure-test

A collection of reusable GitHub Actions for the Modernisation Platform, designed to streamline and enhance workflows across our projects. This repository is defined and managed in Terraform. • This repository is defined and managed in Terraform

8/10

greut/eclint-action

GitHub Action running the EditorConfig linter

3/10

davidb/rust-cargo-make

🛠️ GitHub Action to install `cargo-make` command

4/10

Maintained action available

elastic/apm-aws-lambda/.github/actions/bootstrap

A repository for the AWS Lambda extension and other lambda related tools and build scripts.

6/10

contrast-security-oss/contrast-sca-action

Contrast SCA GitHub Action

6/10

step-integration-tests/auto-pdpr-test-71008-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

fish-shop/indent-check

A GitHub action for checking indentation in fish shell files.

8/10

sonarsource/sonar-java-symbolic-execution/.actions/image

Sonar Java symbolic execution plugin

6/10

step-security/workflow-conclusion-action/__builder_checkout_dir__/.github/actions/compute-sha256

GitHub action to get workflow conclusion. Secure drop-in replacement for technote-space/workflow-conclusion-action.

9/10

esmf-org/install-esmf-action

Install ESMF libraries, modules, and binaries on GitHub Runner

3/10

imaralabs-ai/coder/.github/actions/setup-embedded-pg-cache-paths

Secure environments for developers and their agents

4/10

rafidhaque/fake-mali-action

2/10

step-security/super-linter/image

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10

devantler-tech/ksail/.github/actions/cleanup-hetzner

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10

Maintained action available

sonarsource/gh-action_release/maven-central-sync

7/10

caffeelake/airbyte/.github/actions/public-layout.tsx

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

0/10