Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
reality2byte/setup-deno
Set up your GitHub Actions workflow with a specific version of Deno
kong/slsa-github-generator/.github/actions/secure-download-artifact
Language-agnostic SLSA provenance generation for Github Actions
microsoft/powerplatform-actions/image
Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.
launchdarkly/js-core/actions/public-layout.tsx
LaunchDarkly monorepo for JavaScript SDKs
chronograph-pe/automerge-action
GitHub action to automatically merge pull requests that are ready
checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
anysphere/alls-green
A check for whether the dependency jobs are all green.
kong/github-actions-ensure-sha-pinned-actions
A Github Action to ensure that actions are pinned to full length commit SHAs
egibs/actions/matrix-extra-inputs
A collection of reusable Github Actions workflows.
siemens/ix/.github/workflows/actions/image
Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.
nyrkio/change-detection
GitHub Action for Continuous Benchmarking and NyrkiΓΆ Change Detection
clidey/whodb/.github/actions/image
Where data access meets operational intelligence
caffeelake/xformers/.github/actions/setup-build-cuda
Hackable and optimized Transformers building blocks, supporting a composable construction.
coveo/ui-kit/.github/actions/public-layout.tsx
Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.
launchdarkly/rust-sdk-transport/.github/actions/ci
Transport for use with LaunchDarkly Rust libraries
step-security/delete-untagged-ghcr-action
Action for delete containers from Github container registry. Secure drop-in replacement for Chizkiyahu/delete-untagged-ghcr-action.
stcarolas/setup-maven
Set up your GitHub Actions workflow with a specific version of Apache Maven
notaryproject/notation-action/public-layout.tsx
GitHub Actions for signing and verifying artifacts with Notation
ministryofjustice/cloud-platform-environments/cmd/push-terraform-module-version
Environment configuration for the Cloud Platform
danger/danger-js
β οΈ Stop saying "you forgot to β¦" in code review