Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

adrise/matter-casting/.github/actions/setup-size-reports

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10

ministryofjustice/cloud-platform-environments/cmd/compare-namespace

Environment configuration for the Cloud Platform

6/10

github/super-linter/slim

Combination of multiple linters to install as a GitHub Action

6/10

sredevopsorg/metabase/.github/actions/prepare-backend

The simplest, fastest way to get business intelligence and analytics to everyone in your company :yum:

2/10

lineashub/variable-mapper

Github Action for mapping variables by a specific key

2/10

yonasbsd/dragonfly/.github/actions/fill

A modern replacement for Redis and Memcached

2/10

Maintained action available

step-security/github-action-get-latest-release

A Github action to get the latest release from another repository. Secure drop-in replacement for pozetroninc/github-action-get-latest-release.

8/10

Maintained by StepSecurity

crazy-max/ghaction-setup-containerd

GitHub Action to set up containerd

2/10

exodusmovement/compressed-size-action

GitHub Action that adds compressed size changes to your PRs.

2/10

sfackler/actions/rustup

2/10

khan/pull-request-comment-trigger

A github action for detecting a "trigger" in a pull request description or comment

1/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/marocchino-sticky-pull-request-comment

Mirror from https://github.com/marocchino/sticky-pull-request-comment

1/10

Maintained action available

teleport-actions/auth-k8s

GitHub Action for Teleport Kubernetes Access

2/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-json/wp/v2/pages

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

ministryofjustice/action-setup-container-structure-test

Composite action for installing Google's Container Structure Test

6/10

jidicula/clang-format-action

GitHub Action for clang-format checking

7/10

acryldata/sane-checkout-action

2/10

step-security/semver-action

GitHub Action to calculate the next release version based on conventional commits. Secure drop-in replacement for ietf-tools/semver-action.

8/10

Maintained by StepSecurity

kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256

Language-agnostic SLSA provenance generation for Github Actions

3/10

mfinelli/setup-shfmt

github action to install shfmt

3/10