Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

codfish/semantic-release-action

The Original GitHub Action for running semantic-release. Sets output and environment variables for you to use in subsequent actions.

3/10

step-integration-tests/auto-pdpr-test-02968-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

exercism/github-actions/configlet-ci

A collection of custom GitHub actions used throughout Exercism

5/10

Maintained action available

coveo/ui-kit/.github/actions/playwright-atomic

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-92980-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

metamask/semgrep-action

GitHub Action to run Semgrep with custom rules. Results are uploaded to GitHub's Code Scanning API

4/10

dawidd6/action-send-mail/_next/static/chunks/46183-b052a87b58526c9d.js

:gear: A GitHub Action to send an email to multiple recipients

5/10

Maintained action available

nvidia-nemo/automodel/send-slack-alert/.github/actions/send-slack-alert

🚀 Pytorch Distributed native training library for LLMs/VLMs with OOTB Hugging Face support

8/10

step-security/action-github-changelog-generator

✏️ Automatically generate change log from your tags, issues, labels and pull requests on GitHub. Secure drop-in replacement for janheinrichmerker/action-github-changelog-generator.

10/10

Maintained by StepSecurity

09168806659/metaplex-program-library/.github/actions/yarn-install-and-build

Smart contracts maintained by the Metaplex team

2/10

grafana/community-contributions/.github/actions/setup-node

External contributor PR workflow testing sandbox

2/10

snyk/actions/gradle-9-jdk24

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

nvidia/nvmath-python/.github/actions/fetch_ctk

NVIDIA Math Libraries for the Python Ecosystem

6/10

vexxhost/docker-atmosphere/.github/actions/build-image

Reusable GitHub Actions for building Atmosphere Docker images

4/10

Maintained action available

surrealdb/surrealdb/.github/actions/publish-binaries

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10

Maintained action available

simbo/changes-since-last-release-action

A GitHub action to collect all changes to a repository since the last release.

3/10

grafana/community-contributions/.github/actions/external-pr-validation/monitor-workflows

External contributor PR workflow testing sandbox

2/10

gitguardian/ggshield/actions/iac

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

8/10

frenck/action-home-assistant

🚀 Frenck's GitHub Action for running a Home Assistant Core configuration check

3/10

shiipou/setup-yq-action

GitHub Action to setup the `jq` and `yq` command for yaml and json parsing

3/10