Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
nix-community/cache-nix-action/restore
Cache Nix Store in GitHub Actions to speed up workflows [maintainer=@deemp]
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/cloud-platform-deploy
A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)
swift-institute/.github/.github/actions/ci-subject
Organization-level community-health defaults for Swift Institute.
quipper/setup-aws-cli-action
Set up AWS CLI v2 for self-hosted runners in GitHub Actions
pytorch/ao/test-infra/.github/actions/fill
PyTorch native quantization for training and inference
sonarsource/echoes-react/.actions/get-build-number
A React implementation of Echoes, Sonar's design system.
step-security/snyk-actions/gradle
A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.
luxass/purge-action-cache
Purge GitHub Actions Cache
launchdarkly/roku-client-sdk/.github/actions/ci
LaunchDarkly Client-side SDK for Roku (Brightscript)
sonarsource/sonar-compliance-reports/gh-action_release/main
Holds code for generating compliance reports
instrumenta/kubeval-action
A GitHub Action for using Kubeval
unevenlabs/relay-chain/.github/actions/setup-mock-da
A starter template for building real-time rollups
bitwarden/gh-actions/get-release-version
Bitwarden-utilized GitHub Actions.
step-security/allure-action/__builder_checkout_dir__/.github/actions/privacy-check
Secure drop-in replacement for allure-framework/allure-action.
checkmarxdev/cx-arch-llama-cpp/.github/actions/public-layout.tsx
LLM inference in C/C++
microsoft/msbuild
The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.
tlmsllc/copilot-sdk/.github/actions/setup-copilot
Multi-platform SDK for integrating GitHub Copilot Agent into apps and services
envoyproxy/toolshed/gh-actions/bson
dangoslen/changelog-enforcer
A simple GitHub action that enforces that a maintained changelog is kept up to date.
kentaro-m/task-completed-checker-action
:ballot_box_with_check: A GitHub action that checks if all tasks are completed in the pull requests.