Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

reviewdog/action-yamllint

Run yamllint with reviewdog

4/10

userdocs/actions/boost

3/10

Maintained action available

timschoenle/actions/actions/common/create-branch

Centralized collection of reusable GitHub Actions, Workflows, and configurations.

7/10

kong/action-slack-notify

GitHub Action for sending a notification to a Slack channel

4/10

step-security/launchdarkly-gha-flags/__builder_checkout_dir__/.github/actions/privacy-check

Evaluate LaunchDarkly flags in your GitHub Action workflow. Secure drop-in replacement for launchdarkly/gha-flags.

10/10

jsmrcaga/action-netlify-deploy

4/10

datadog/dd-octo-sts-action

5/10

step-security/dsanders11-project-actions/get-item

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10

Maintained by StepSecurity

git-hub-chris/visualstudiocode/actions/new-release

Microsoft Visual Studio Code.

6/10

rasahq/rasa-train-test-gha

A GitHub action to run easily rasa train and rasa test in the CIs.

5/10

grafana/grafana/.github/actions/check-jobs

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

4/10

Maintained action available

openzeppelin/oif-solver/.github/actions/oidc

Open-source solver implementation, tooling, and libraries to easy start filling cross-chain intents.

2/10

step-security/allure-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Secure drop-in replacement for allure-framework/allure-action.

10/10

elastic/docs-builder/actions/validate-inbound-local

7/10

step-security/r-lib-actions/setup-renv

GitHub Actions for the R community. Secure drop-in replacement for r-lib/actions.

10/10

Maintained by StepSecurity

keisukeyamashita/setup-release

🎁 GitHub Action that downloads a release and provision for later job usage

2/10

cloudposse/github-action-atmos-affected-stacks

A composite workflow that runs the atmos describe affected command

6/10

sh-cho/netty/.github/actions/thread-dump-jvms

Netty project - an event-driven asynchronous network application framework

3/10

depot/bake-action

GitHub Action to use Buildx Bake as a high-level build command using Depot remote builders

3/10

ozi-project/provenance

Provenance workflow for OZI tools

5/10

Maintained action available