Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/setup-vals

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

Maintained by StepSecurity

mavrosxristoforos/get-xml-info

Get Information from XML files to use into your GitHub workflows

5/10

pcysl5edgo/cat

GitHub Action to cat a file

3/10

step-security/import-codesign-certs

GitHub Action for Importing Code-signing Certificates into a Keychain. Secure drop-in replacement for Apple-Actions/import-codesign-certs.

10/10

Maintained by StepSecurity

orcid/changelog-action

action to update a changelog and create a github release

2/10

chronograph-pe/actions-permissions/monitor

GitHub token permissions Monitor and Advisor actions

2/10

actions-security-demo/script-injection/actions/commands

2/10

cupcakearmy/confluence-markdown-sync

2/10

launchdarkly/dotnet-eventsource/.github/actions/build-docs

Server-sent events (SSE) client implementation for .NET

3/10

useblacksmith/cache/restore

Cache dependencies and build outputs in GitHub Actions

2/10

protocolbuffers/protobuf-ci/../../_actions/current/internal/docker-run

A shared repository for Protobuf CI actions

4/10

smartcontractkit/.github/actions/setup-gap

reusable GHA workflows and actions

5/10

Maintained action available

shundor/python-bandit-scan

GitHub Action for Bandit SAST

5/10

equinor/oneseismic-api/.github/actions/load_openvds_image

Web API for fast access of arbitrary seismic slices from VDS data

4/10

Maintained action available

step-security/asdf-vm-actions/plugins-add

GitHub Actions for the asdf version manager. Secure drop-in replacement for asdf-vm/actions.

10/10

Maintained by StepSecurity

crazy-max/ghaction-docker-buildx

:octocat: GitHub Action to set up Docker Buildx

4/10

mozilla-it/deploy-actions/docker-push

Generic GitHub composite actions/workflows for deploying applications

6/10

kubepug/kubepug-installer

kubepug-installer GitHub Action

5/10

bryannice/gitactions-slack-notification

Git Action Slack Notifications From Build Status

4/10

rudderlabs/setup-aws-signer-notation-cli

This GitHub Action installs Notation CLI with the AWS Signer plugin.

3/10