Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

contrast-security-oss/contrastscan-action

Contrast Scan GitHub action

4/10

kong/setup-deck

Make decK available in your GitHub Actions workflows

2/10

yuhao-tubi/custom-actions-js

2/10

zingdevlimited/actions-helpers/helpers/setup-flex-cli

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks.

4/10

Maintained action available

aerospike/spring-data-aerospike/.github/actions/publish-to-sonatype

Spring Data Aerospike

7/10

morrisoncole/pr-lint-action

:octocat: A fast 🔥 TypeScript GitHub Action to ensure that your PR title matches a given regex.

4/10

step-security/lock-threads

GitHub Action that locks closed issues, pull requests and discussions after a period of inactivity. Secure drop-in replacement for dessant/lock-threads.

10/10

Maintained by StepSecurity

pytorch/torchft/test-infra/.github/actions/setup-ssh

Fault tolerance for PyTorch (HSDP, LocalSGD, DiLoCo, Streaming DiLoCo)

6/10

step-integration-tests/auto-pdpr-test-29182-5/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

dustin4444/react-native/.github/actions/build-npm-package

A framework for building native applications using React

3/10

j178/prek-action

Run prek in your GitHub Actions workflows

7/10

andyfeller/issueops-createrepo/assign

GitHub Action solution for creating repository through GitHub issue workflows.

3/10

grafana/shared-workflows/actions/login-to-gar

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

step-integration-tests/auto-pdpr-test-38516-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-07769-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

lapce/xcode-staple

Xcode Staple

2/10

ayltai/setup-graalvm

GraalVM GitHub action

0/10

tetherto/qvac/.github/actions/strip-prebuilds

Open-source local AI SDK - run AI on-device with no cloud, no API keys. Supports GGUF, RAG, image, music, and video generation, speech-to-text, P2P inference, and more. Cross-platform: Linux, macOS, Windows, Android, iOS.

7/10

ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/image

HMPPS Manage People on Probation UI

8/10

launchdarkly/go-semver/.github/actions/benchmarks

semantic version parsing and comparison package

4/10