Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

tempoxyz/gh-actions/vendor/zizmorcore/zizmor-action

Reusable GitHub Actions for Tempo

6/10

redpanda-data/llvm-project/workflows/.github/workflows/release-binaries-setup-stage

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.

3/10

posthog/posthog/.github/actions/setup-turbo

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10

Maintained action available

step-security/dispatch-workflow

A GitHub Action to Dispatch and Discover GitHub Workflows using workflow_dispatch or repository_dispatch. Secure drop-in replacement for lasith-kg/dispatch-workflow.

10/10

Maintained by StepSecurity

animmouse/setup-restic

Setup/Install Restic for GitHub Actions

3/10

kirillplatonov/action-standard

Run Standard Ruby with Reviewdog 🐶

3/10

asdf-vm/actions

GitHub Actions for the asdf version manager

5/10

sparkgeo/github-actions/.github/actions/github-actionlint

Various Github Actions that can be reused

8/10

pytorch/ao/test-infra/.github/actions/checkout

PyTorch native quantization for training and inference

4/10

Maintained action available

nvidia/transformerengine/.github/actions/public-layout.tsx

A library for accelerating Transformer models on NVIDIA GPUs, including using 8-bit and 4-bit floating point (FP8 and FP4) precision on Hopper, Ada and Blackwell GPUs, to provide better performance with lower memory utilization in both training and inference.

6/10

dagster-io/dagster-cloud-action/actions/utils/parse_workspace

5/10

sasobadovinac/occt/.github/actions/download-artifacts

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

3/10