Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

trinodb/github-actions/slash-command-dispatch

Github actions used in the Trino project

2/10

slsa-framework/slsa-github-generator/.github/actions/fill

Language-agnostic SLSA provenance generation for Github Actions

5/10

step-security/workflow-conclusion-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action to get workflow conclusion. Secure drop-in replacement for technote-space/workflow-conclusion-action.

9/10

step-security/swift-android-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action to build and run Swift package tests on an Android emulator. Secure drop-in replacement for skiptools/swift-android-action.

10/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/auditjson_to_sarif

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

4/10

nvidia/cudaqx/.github/actions/get-cudaq-build

Accelerated libraries for quantum-classical computing built on CUDA-Q.

4/10

Maintained action available

cli/gh-extension-precompile

Action for publishing binary GitHub CLI extensions

7/10

open-edge-platform/orch-ci/.github/actions/setup-asdf

Central hub for shared continuous integration (CI) workflows and actions for the Open-Edge-Platform project

8/10

n8n-io/n8n/.github/actions/setup-nodejs-blacksmith

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

5/10

Maintained action available

sasobadovinac/occt/.github/actions/upload-vcpkg-cache

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

5/10

Maintained action available