Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

open-edge-platform/geti-ci/actions/pre-commit

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

openai/codex/.github/actions/%5c%5c%5c%22https%3a/developers.openai.com/codex/ide%5c%5c%5c%22%5cu003einstall

Lightweight coding agent that runs in your terminal

6/10

dustin4444/checkout/localclone

Action for checking out a repo

5/10

Maintained action available

yonasbsd/mise/.github/actions/mise-tools

dev tools, env vars, task runner

5/10

Maintained action available

step-security/auto-unapprove

Secure drop-in replacement for RotemK1/auto-unapprove.

10/10

Maintained by StepSecurity

open-edge-platform/geti-ci/actions/check-paths

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

timharris777/action

3/10

ministryofjustice/opg-github-actions/actions/fill

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

6/10

celo-org/reusable-workflows/.github/actions/build-container

Publicly viewable repository for creating reusable github actions workflows

4/10

docker/bake-action/qx9ds2%20%3cxs1%2f%26%23x3c%3bxs2%26%23x2f%3b/list-targets

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-35163-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

adrise/matter-casting/.github/actions/setup-ccache

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10

martinbeentjes/npm-get-version-action

This Action scans for a package.json file and reads the version number from that.

6/10

stefanprodan/kustomizer/action

An experimental package manager for distributing Kubernetes configuration as OCI artifacts.

2/10

bazel-contrib/.github/.github/workflows/release_ruleset.yaml

GitHub metadata for the org

4/10

sonarsource/sonar-java-symbolic-execution/gh-action_release/image

Sonar Java symbolic execution plugin

6/10

pauloconnor/create-ecr-repository-action

Action to create Amazon ECR or ECR Public repository and put lifecycle policy

2/10

step-security/vimtor-action-zip/__builder_checkout_dir__/.github/actions/privacy-check

🗄️ Action for zipping files easily. Secure drop-in replacement for vimtor/action-zip.

10/10

useblacksmith/checkout

5/10

Maintained action available

yorifuji/easy-vrt/actual

GitHub Action that simplifies visual regression testing by providing a workflow template

2/10