Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-87792-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

paranoidbeing/action-wip-blocker

GitHub Action that blocks WIP PRs

2/10

zavoloklom/shields/.github/actions/setup

Concise, consistent, and legible badges in SVG and raster format

3/10

yonasbsd/opendal/.github/actions/fill

Apache OpenDAL: access data freely.

5/10

Maintained action available

tryghost/label-actions

Tools for managing Ghost's OSS repositories

0/10

yonasbsd/buck2/.github/actions/setup_macos_env

Build system, successor to Buck

3/10

Maintained action available

step-integration-tests/auto-pdpr-test-62616-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

c-hive/gha-remove-artifacts

GitHub Action to customize artifact cleanup

6/10

project-dalec/dalec/.github/actions/dns-spoof-ubuntu-archive

📦 Produce secure packages and containers with declarative configurations

6/10

vemel/nextchange

Parse and update CHANGELOG.md action

2/10

surrealdb/rocksdb/.github/actions/setup-folly

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

inception-health/otel-export-trace-action

2/10

grafana/mimir-prometheus/.github/promci/actions/check_proto

7/10

tannergolden/standards/actions/apply-rulesets

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.

5/10

step-security/install-datadog-ci-github-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for DataDog/install-datadog-ci-github-action.

10/10

step-security/alls-green

A check for whether the dependency jobs are all green. Secure drop-in replacement for re-actors/alls-green.

10/10

Maintained by StepSecurity

step-security/lcov-reporter-action

Comments a pull request with the code coverage generated by your tests. Secure drop-in replacement for romeovs/lcov-reporter-action.

8/10

Maintained by StepSecurity

sozercan/dynamo/.github/actions/image

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

benc-uk/workflow-dispatch

A GitHub Action for triggering workflows, using the `workflow_dispatch` event

5/10

xaviermp14/copilot-sdk/.github/actions/java-test-report

Multi-platform SDK for integrating GitHub Copilot Agent into apps and services

3/10