Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

ncruces/go-coverage-report

GitHub Action to add a coverage badge to your Go repo

4/10

grafana/k6-extension-registry/.github/actions/k6registry_setup

k6 Extension Registry

5/10

Maintained action available

dlidstrom/genai-code-review

Automated code review by ChatGPT latest model, customizable, and never tiring!

3/10

jasonkarns/create-release

An Action to create releases via the GitHub Release API

2/10

maxep/spm-lcov-action

Swift Package Manager Code Coverage Report

2/10

step-security/action-semantic-demo/wrapper-validation

8/10

yonasBSD/trilium/.github/actions/build-electron

Build your personal knowledge base with Trilium Notes

4/10

Maintained action available

Git-Hub-Chris/VisualStudioCode/actions/classifier-deep/apply/apply-labels

Microsoft Visual Studio Code.

6/10

reviewdog/action-suggester

:dog: Suggests any code changes based on diff through GitHub Multi-line code suggestions by using reviewdog

5/10

yonasBSD/fish-shell/.github/actions/rust-toolchain

The user-friendly command line shell.

5/10

Maintained action available

actions/publish-action

6/10

grafana/changelog-checker

GitHub Action checking that CHANGELOG.md has been updated

4/10

step-security/setup-kubectl

GitHub Action for installing Kubectl. Secure drop-in replacement for Azure/setup-kubectl.

10/10

Maintained by StepSecurity

navikt/familie-baks-gha-workflows/.github/actions/setup-node-yarn

Felles GitHub Actions workflows for Team BAKS sine applikasjoner

8/10

OpenZeppelin/defender-sdk/.github/actions/prepare

Defender SDK

5/10

rorychan/jira-releases-action

2/10

Homebrew/actions/wait-for-idle-runner

🚀 Homebrew's GitHub Actions

7/10

actions-security-demo/pytorch/pytorch/.github/actions/chown-workspace

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

microsoft/powerplatform-actions/actions-install

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

5/10

facebook/pysa-action

GitHub Action for Pysa

5/10