Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

launchdarkly/go-server-sdk-redis-go-redis/.github/actions/get-go-version

Redis integration for the LaunchDarkly SDK for Server-side Go (with go-redis client)

5/10

step-security/setup-class-hash/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for making starknet-class-hash available in your workflows. Secure drop-in replacement for ericnordelo/setup-class-hash.

10/10

jupyterlab/maintainer-tools/.github/actions/check-links

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

8/10

steve-downey/cxx_template/.github/actions/setup_cache

C++ Template forked and then used from gui_starter_template

2/10

crazy-max/image

Work with containers' images

3/10

ministryofjustice/hmpps-integration-api/.github/actions/policy-file-generator

A long-lived API that exposes data from HMPPS systems providing a single point of entry for consumers.

8/10

withgraphite/dismiss-stale-approvals

4/10

Maintained action available

instaclustr/agentgateway/.github/actions/prep-runner

Next Generation Agentic Proxy for AI Agents and MCP servers

5/10

Maintained action available

ministryofjustice/analytical-platform-github-actions/setup-crane

Analytical Platform GitHub Actions • This repository is defined and managed in Terraform

8/10

varabyte/update-aur-package

Bumps your AUR packages on tag creation

3/10

tnikfi/json-file-transform

GitHub Action for transforming JSON files. Definitely not as powerful as jq, but gets the job done for simple transforms.

0/10

paddlehq/cobraman/.github/actions/setup-go

Documentation generator replacement for spf13/cobra.

5/10

userdocs/actions/qemu

3/10

Maintained action available

int128/docker-manifest-create-action

Create a multi-architectures container image in GitHub Actions

6/10

yonasbsd/authentik/.github/actions/setup

The authentication glue you need.

4/10

Maintained action available

git-hub-chris/visualstudiocode/actions/classifier-deep/train/fetch-issues

Microsoft Visual Studio Code.

6/10

ministryofjustice/laa-assess-a-claim-frontend/.github/actions/trigger_workflow

Frontend application for the LAA Assess a Claim service

6/10

nrwl/nx-set-shas

:sparkles: A Github Action which sets the base and head SHAs required for `nx affected` commands in CI

7/10

grafana/xk6-ai/.github/actions/build-k6-extension

a k6 extension for evaluating ai agents

0/10

sfdx-actions/setup-sfdx

Salesforce SFDX CLI GitHub Action

3/10