Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

op5dev/prompt-ai

AI inference request GitHub Models via this GitHub Action.

6/10

step-integration-tests/auto-pdpr-test-57545-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

advanced-security/sarif-toolkit/relativepaths

All things SARIF, as an Action

6/10

sonatype/actions/setup-iq-cli%40v1

Public repository to keep Sonatype's GitHub Actions.

3/10

elastic/elastic-otel-python/.github/actions/env-install

5/10

Maintained action available

spotdemo4/bumper

git semantic version conventional commit bumper

6/10

step-security/task-completed-checker-action

:ballot_box_with_check: A GitHub action that checks if all tasks are completed in the pull requests. Secure drop-in replacement for kentaro-m/task-completed-checker-action.

8/10

Maintained by StepSecurity

endocrimes/setup-nomad

A GitHub Action to install HashiCorp's Nomad.

2/10

nvidia/cucollections/.github/actions/configure_cccl_sccache

5/10

Maintained action available

fathym/github-tag-action

A Github Action to tag a repo on merge.

3/10

home-assistant/wheels

Build wheels for Home Assistant

7/10

step-security/setup-opentofu/__builder_checkout_dir__/.github/actions/public-layout.tsx

Secure drop-in replacement for opentofu/setup-opentofu.

10/10

vitessio/vitess/.github/actions/setup-microceph

Vitess is a database clustering system for horizontal scaling of MySQL.

8/10

arm-software/cmsis-actions/image

Custom GitHub actions for MDK / AVH-FVP CI workflows

5/10

step-integration-tests/auto-pdpr-test-65297-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-12525-5/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

launchdarkly/ld-relay/__builder_checkout_dir__/.github/actions/public-layout.tsx

LaunchDarkly Relay Proxy

6/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_failure_results

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10

step-security/setup-zig/__builder_checkout_dir__/.github/actions/secure-download-artifact

Install a Zig compiler for usage in GitHub Actions workflows. Secure drop-in replacement for mlugg/setup-zig.

10/10

sonarsource/sonar-analyzer-commons/.actions/fill

Logic useful for a language plugin

7/10