Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

n0-computer/actions-upload-release-asset

Yet Another Upload Release Asset Action

3/10

launchdarkly/openfeature-node-server/.github/actions/publish-docs

An open feature provider for the LaunchDarkly node SDK.

0/10

speakeasy-api/packagist-update

A Github Action to update packagist packages

2/10

deepcode-ai/spoon/.github/actions/setup-tests

Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

4/10

Maintained action available

caffeelake/ladybird/.github/actions/cache-save

Truly independent web browser

5/10

Maintained action available

microsoft/security-devops-action

Microsoft Security DevOps for GitHub Actions.

7/10

dustin4444/aa-sdk/.github/actions/setup

5/10

Maintained action available

nvidia-nemo/labs-voice-agent/ci-templates/.github/actions/check-nvidia-sso

A fully opensource framework for building and evaluating voice agents with open models.

8/10

jonathancombs782/next.js/.github/actions/next-integration-stat

The React Framework

2/10

bitwarden/gh-actions/report-deployment-status-to-slack

Bitwarden-utilized GitHub Actions.

6/10

dustin4444/noir/.github/actions/download-binary

Noir is a domain specific language for zero knowledge proofs

5/10

Maintained action available

veracode/veracode-sca

Veracode Software Composition Analysis Scanning

3/10

lgtm-hq/lgtm-ci/.github/actions/image

Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions

7/10

elastic/elastic-otel-python/.github/actions/fill

8/10

marceloprado/has-changed-path

GitHub Action that saves time and money in monorepo environments

2/10

bump-sh/github-action

GitHub action to deploy your API documentation on Bump

4/10

Maintained action available

xalvarez/prevent-file-change-action

Fail a pull request workflow if certain files are changed

6/10

step-integration-tests/auto-pdpr-test-06964-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-20996-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

softprops/diffset

A GitHub Action for producing lists of files that changed between branches

5/10

Maintained action available