Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

quantco/ui-actions/version-metadata

Monorepo for UI related github actions

3/10

intel/ai-containers/apptainer

This repository contains Dockerfiles, scripts, yaml files, Helm charts, etc. used to scale out AI containers with versions of TensorFlow and PyTorch that have been optimized for Intel platforms. Scaling is done with python, Docker, kubernetes, kubeflow, cnvrg.io, Helm, and other container orchestration frameworks for use in the cloud and on-premise

5/10

jianlins/llama.cpp/.github/actions/image

LLM inference in C/C++

5/10

Maintained action available

anchore/grype-db/.github/actions/bootstrap

7/10

dargon789/0xsequence.js/.github/actions/install-dependencies

Sequence: modular web3 development platform and account abstraction stack for Ethereum chains

4/10

Maintained action available

chronograph-pe/create-github-app-token

GitHub Action for creating a GitHub App Installation Access Token

2/10

chainguard-dev/actions/nodiff

A collection of reusable Github Actions workflows.

8/10

sonarsource/gh-action_release/gh-action_release/main

7/10

lgtm-hq/py-lintro/.github/actions/semantic-pr-title-check

Making linters play nice... Mostly.

8/10

step-security/cysharp-actions/.github/actions/check-metas

Secure drop-in replacement for Cysharp/Actions.

10/10

Maintained by StepSecurity

peterjgrainger/action-changelog-reminder

2/10

sh-cho/idt/__builder_checkout_dir__/.github/actions/secure-download-artifact

idt(id tool) - A fast, ergonomic CLI tool for working with various ID formats

7/10

redhat-cop/github-actions/get-image-version

Collection of GitHub Actions implementations

6/10

raycast/github-actions/get-changed-extensions

3/10

Maintained action available

nvidia/model-optimizer/.github/actions/ubuntu-setup

A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.

7/10