Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

fortify/github-action/package

Fortify GitHub Actions

1/10

step-security/trinodb-github-actions

Github actions used in the Trino project. Secure drop-in replacement for trinodb/github-actions.

9/10

step-security/action-openfga-deploy/__builder_checkout_dir__/.github/actions/privacy-check

Github Action for deploying your Authorization Model to an OpenFGA Store. Secure drop-in replacement for openfga/action-openfga-deploy.

10/10

step-integration-tests/auto-pdpr-test-79922-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

swiftylab/ci/actions/setup

Support files and configurations for SwiftyLab's CI

2/10

tempoxyz/gh-actions/vendor/mozilla-actions/sccache-action

Reusable GitHub Actions for Tempo

4/10

Maintained action available

coveo/ui-kit/.github/actions/setup

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

firestoned/github-actions/security/verify-signed-commits

3/10

mridang/action-commit-lint

A reusable and enhanced GitHub action that enforces conventional commit message standards.

2/10

breathingdust/current-milestone-action

GitHub action to add merged PR's and linked issues to a specified milestone .

0/10

nurvx/nautilus_trader/.github/actions/cargo-tool-install

A high-performance algorithmic trading platform and event-driven backtester

7/10

alwaysmeticulous/report-diffs-action/public-layout.tsx

Run Meticulous tests

4/10

Maintained action available

step-security/cosign-installer/__builder_checkout_dir__/.github/actions/secure-download-artifact

Cosign Github Action. Secure drop-in replacement for sigstore/cosign-installer.

10/10

tibdex/auto-update

🔄 Automatically keep pull requests with auto-merge enabled up to date with their base branch

3/10

yonasbsd/posthog/.github/actions/commit-snapshots

🦔 PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.

2/10

Maintained action available

linuxfoundation/lfx-public-workflows/.github/actions/fill

8/10

step-security/action-cond/__builder_checkout_dir__/.github/actions/privacy-check

Conditional value for GitHub Action - missing expression for GitHub Actions . Secure drop-in replacement for haya14busa/action-cond.

10/10

jacobtomlinson/gha-read-helm-chart

Read a Helm chart's Chart.yaml file and expose values as outputs

5/10

elastic/docs-builder/actions/assembler-match

7/10

r-lib/actions/setup-pandoc

GitHub Actions for the R community

9/10