Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

benjule/bambustudio/.github/actions/setup-gpg

BambuStudio fork with Linux packaging (AppImage, .deb, .rpm, Flatpak), CI/CD improvements and security hardening

5/10

Maintained action available

metamask/cla-signature-bot

GitHub Action for self-contained handling of CLA signatures

3/10

cadwallion/publish-rubygems-action

2/10

opentofu/setup-opentofu

8/10

briansmith/actions-rs-toolchain

🛠️ GitHub Action for `rustup` commands

2/10

legoktm/gh-action-build-deb

GitHub Action for building Debian packages on Buster

3/10

googlecloudplatform/functions-framework-conformance/.github/actions/client/resolve-latest

A Tool for Validating Conformance to the Functions Framework Contract

3/10

pytorch/data/test-infra/.github/actions/fill

A PyTorch repo for data loading and utilities to be shared by the PyTorch domain libraries.

3/10

step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/fill

🛠️ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.

10/10

grafana/mimir-prometheus/.github/promci/actions/build

7/10

ozi-project/draft

OZI release draft workflow.

5/10

quad4-software/reticulum-go/.github/actions/verify-workspace-clean

A high-performance and secure Go implementation of the Reticulum Network Stack.

7/10

bmos/fg-forge-updater

Submits updated packages to the FantasyGrounds Forge

0/10

notdodo/erfiume_bot

Bot per leggere i livelli idrometrici dei fiumi dell'Emilia Romagna riportati da allertameteo.regione.emilia-romagna.it.

5/10

Maintained action available

yonasbsd/rocksdb/.github/actions/perform-benchmarks

A library that provides an embeddable, persistent key-value store for fast storage.

5/10

Maintained action available

astral-sh/setup-uv

Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/

7/10

launchdarkly/opencensus-go-exporter-stackdriver/.github/actions/coverage

OpenCensus Go exporter for Stackdriver Monitoring and Trace

5/10

step-security/setup-buildx-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

yonasbsd/grafana/actions/image

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10

Maintained action available

veeezo/docs-1/.github/actions/clone-translations

The open-source repo for docs.github.com

2/10