Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

actions/create-release

An Action to create releases via the GitHub Release API

6/10

pytorch/TensorRT/test-infra/.github/actions/setup-ssh

PyTorch/TorchScript/FX compiler for NVIDIA GPUs using TensorRT

3/10

Maintained action available

honeycombio/oss-management-actions/labels

A set of GitHub Actions to apply a common set of OSS management workflows to Honeycomb projects.

4/10

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

7/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/xmlrpc.php

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

envoyproxy/toolshed/actions/github/run

7/10

tryghost/actions/actions/slack-build

GitHub Actions to power Ghost development

4/10

agogear/chatgpt-pr-review

2/10

goreleaser/goreleaser

Release engineering, simplified

10/10

jwalton/gh-ecr-push

GitHub Action to push a docker image to Amazon ECR.

1/10

arduino/arduino-lint-action

GitHub Actions action to check Arduino projects for problems

7/10

taiki-e/upload-rust-binary-action

GitHub Action for building and uploading Rust binary to GitHub Releases.

7/10

spotdemo4/nix-init

action to initialize nix repos

4/10

luob/create-my-awesome

Github Actions for automatically generating the personal awesome list from all of the repositories you starred.

2/10

github/ai-moderator

An AI-powered GitHub Action that detects and tags spam in your repository

7/10

medizininformatik-initiative/fhir-ontology-generator/.github/actions/availability

4/10

Maintained action available

appany/helm-oci-chart-releaser

Push Helm Charts to OCI-based registries

3/10

envoyproxy/toolshed/actions/github/pr

7/10

n0izn0iz/mkache

Cache dependencies and build outputs in GitHub Actions

2/10

optum/sourcehawk/.github/actions/build-native-image

Sourcehawk is an extensible compliance as code tool which allows development teams to run compliance scans on their source code.

2/10