Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

codota/heroku-deploy

A simple github action that dynamically deploys an app to heroku

0/10

nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-cli-coverage-merge

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10

ministryofjustice/laa-civil-manage-api/.github/actions/build_and_test

API to allow legal providers to manage their applications for civil legal aid.

7/10

docker/docker-agent-action/.github/actions/image

A GitHub Action for running Docker Agent AI agents in your workflows.

5/10

Maintained action available

launchdarkly/sdk-meta/.github/actions/publish-npm

SDK Metadata.

5/10

Maintained action available

yonasbsd/servo/.github/actions/fill

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

5/10

Maintained action available

step-security/renovatebot-github-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for renovatebot/github-action.

10/10

petarpetrovt/setup-sde

Set up Intel's SDE binaries for GitHub Actions workflow

5/10

sonarsource/vault-action-wrapper

Ease the usage of hashicorp/vault-action within Sonar

7/10

bgd-labs/github-workflows/.github/actions/foundry-size

a collection of github workflows used at bgd

4/10

yonasbsd/neon/.github/actions/allure-report-generate

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

2/10

aquaproj/registry-action/test

GitHub Actions for aqua Registry

6/10

bytecodealliance/actions/wasmtime/setup

GitHub actions to setup wasm-tools and wasmtime

3/10

nvidia/nautobot-app-fsus/.github/actions/poetry

Field Serviceable Units for Nautobot

4/10

step-security/setup-ocaml/analysis

GitHub Action for the OCaml programming language. Secure drop-in replacement for ocaml/setup-ocaml.

10/10

Maintained by StepSecurity

protocolbuffers/protobuf-ci/internal/repository-cache-save

A shared repository for Protobuf CI actions

5/10

ministryofjustice/hmpps-probation-integration-services/.github/actions/gradle-build

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10

kineticcafe/actions/dependabot-automerge

Shared public actions for Kinetic Commerce

0/10

yonasbsd/surrealdb/.github/actions/publish-crate

A scalable, distributed, collaborative, document-graph database, for the realtime web

2/10

bahmutov/npm-install

GitHub Action for install npm dependencies with caching without any configuration

3/10