Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

aerospike-community/spring-data-aerospike-starters/.github/actions/publish-to-sonatype

spring-data-aerospike-starters

4/10

replayio/action-upload

GitHub Action to upload recordings to Replay.io

3/10

braintrustdata/eval-action

3/10

bahmutov/should-run-github-action

A reusable GitHub action to determine if the user clicked a checkbox inn the PR text

0/10

step-security/quarto-actions/setup

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10

Maintained by StepSecurity

mevisoft/docker-laravel/.github/actions/build-and-push-docker

2/10

ministryofjustice/laa-data-access-api/.github/actions/extract_release_name_from_branch

6/10

pytorch/ao/test-infra/.github/actions/setup-miniconda

PyTorch native quantization and sparsity for training and inference

2/10

Maintained action available

ljharb/actions/node/build

GitHub actions I use for CI.

5/10

Maintained action available

equinor/segyio/.github/actions/public-layout.tsx

Fast Python library for SEGY files.

4/10

dev-drprasad/delete-tag-and-release

3/10

vision-web3-foundation/ci-workflows/.github/actions/install-poetry

3/10

devantler-tech/ksail/.github/actions/ksail-test-workload

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

5/10

Maintained action available

actions-security-demo/pytorch/pytorch/.github/actions/setup-linux

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

yonasbsd/greptimedb/.github/actions/build-and-push-ci-image

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10

Maintained action available

hebilicious/image

Plug-and-play image optimization for Nuxt applications.

2/10

ai-dynamo/modelexpress/.github/actions/dump-vcluster-diagnostics

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10

caffeelake/onnxruntime/.github/actions/locate-vcvarsall-and-setup-env

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10

step-security/action-send-mail/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.

10/10

swift-institute/.github/.github/actions/upsert-tracking-issue

Organization-level community-health defaults for Swift Institute.

3/10