Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/actions-find-and-replace-string/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/actions-find-and-replace-string/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A GitHub action to execute find-and-replace on strings. Secure drop-in replacement for mad9000/actions-find-and-replace-string.

10/10
chainguard-dev/actions/apko-build

chainguard-dev/actions/apko-build

A collection of reusable Github Actions workflows.

8/10
Reality2byte/codeql-action/../action/analyze

Reality2byte/codeql-action/../action/analyze

Actions for running CodeQL analysis

7/10
grafana/epimetheus/.github/promci/actions/publish_main

grafana/epimetheus/.github/promci/actions/publish_main

FrostDB backed Prometheus fork

3/10
Homebrew/actions/create-pull-request

Homebrew/actions/create-pull-request

🚀 Homebrew's GitHub Actions

7/10
ashutoshvarma/setup-ninja

ashutoshvarma/setup-ninja

Set up your GitHub Actions workflow with a specific version of ninja

3/10
kilianpaquier/semantic-release-requests/.github/actions/version

kilianpaquier/semantic-release-requests/.github/actions/version

Pull requests creation plugin for semantic-release to avoid pushing changes directly with @semantic-release/git and create requests from release candidate branches

4/10
pulumi/esc-export-secrets-action

pulumi/esc-export-secrets-action

A GitHub Action to export GitHub Actions secrets to Pulumi ESC

2/10
chainguard-dev/tw/.github/actions/shellcheck

chainguard-dev/tw/.github/actions/shellcheck

6/10
pixta-dev/repository-mirroring-action

pixta-dev/repository-mirroring-action

A GitHub Action for mirroring a repository to another repository

5/10
actions/stale

actions/stale

Marks issues and pull requests that have not had recent interaction

7/10
dagster-io/dagster-cloud-action/actions/utils/ci-init

dagster-io/dagster-cloud-action/actions/utils/ci-init

3/10
coder/start-workspace-action

coder/start-workspace-action

6/10
grafana/plugin-actions/build-plugin

grafana/plugin-actions/build-plugin

6/10
amilcarlucas/mypy-github-action

amilcarlucas/mypy-github-action

mypy github action

4/10
celo-org/trivy-composite-action

celo-org/trivy-composite-action

Composite action for the Trivy scanning

4/10
docker/metadata-action

docker/metadata-action

GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker

8/10
coinbase/cds/.github/actions/get-merge-base

coinbase/cds/.github/actions/get-merge-base

Coinbase Design System

6/10
grafana/plugin-ci-workflows/actions/plugins/publish/check-and-create-stub

grafana/plugin-ci-workflows/actions/plugins/publish/check-and-create-stub

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

7/10
MichaelVoelkel/test-reporter

MichaelVoelkel/test-reporter

Displays test results from popular testing frameworks directly in GitHub

2/10