Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

elastic/es-perf-github-status

Custom GitHub action for Elasticsearch Performance team

4/10

tsukimarf/eips/.github/actions/merge-repos

The Ethereum Improvement Proposal repository

3/10

zattoo/deploy-status

GitHub Action to create Deployment

2/10

step-security/actions/setup-gitsign

A collection of reusable Github Actions workflows.

7/10

fossifyorg/.github/.github/actions/gradle-cache

6/10

step-security/jest-coverage-action-demo/__builder_checkout_dir__/.github/actions/privacy-check

9/10

rapidsai/node/.github/actions/image

GPU-accelerated data science and visualization in node

5/10

Maintained action available

scitt-community/scitt-api-emulator

SCITT API Emulator

6/10

ministryofjustice/laa-ccw-fees-ui/.github/actions/setup

UI for CCW Fees Calculator

4/10

sonarsource/sonarjs/.actions/get-build-number

SonarSource Static Analyzer for JavaScript and TypeScript

4/10

Maintained action available

ministryofjustice/ndelius-um/.github/actions/fill

NDelius User Management Tool

3/10

jackyef/bundlewatch-gh-action

GitHub action that allows you to easily run bundlewatch in your repository 📦

2/10

step-security/vitest-coverage-report-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to report vitest test coverage results. Secure drop-in replacement for davelosert/vitest-coverage-report-action.

8/10

dflook/tofu-fmt-check

GitHub action to check the formatting of OpenTofu files

2/10

step-security/trinodb-github-actions/block-commits

Github actions used in the Trino project. Secure drop-in replacement for trinodb/github-actions.

9/10

Maintained by StepSecurity

step-security/github-action-helm3

Slim wrapper around helm3. Secure drop-in replacement for WyriHaximus/github-action-helm3.

10/10

Maintained by StepSecurity

condenast/conventional-pull-request-action

Lint pull requests with the conventional commit spec, for a clean and conventional commit history

3/10

ministryofjustice/laa-data-claims-api/.github/actions/public-layout.tsx

LAA Data Claims API

8/10

bytemare/workflows/actions/ort-report

A collection of hardened reusable Github Workflows.

5/10

aerospike/aerospike-client-c/.github/actions/get-version

Aerospike C Client

6/10