Assess the risk of third-party GitHub Actions

yonasbsd/turbo/.github/actions/setup-environment

Incremental bundler and build system optimized for JavaScript and TypeScript, written in Rust.

3/10

caffeelake/godot/.github/actions/godot-project-test

Godot Engine – Multi-platform 2D and 3D game engine

3/10

dopplerhq/cli-action

GitHub Action for installing the Doppler CLI

7/10

epic-breakfast-productions/ebp-ci/.github/actions/setup-quarkus-runner

CI pipeline libraries for EBP github projects

5/10

posthog/posthog/.github/actions/rust-compute-affected

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

gradle/actions/fill

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

reviewdog/action-brakeman

Run brakeman with reviewdog 🐶

step-integration-tests/auto-pdpr-test-26500-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

step-security/repo-file-sync-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories. Secure drop-in replacement for BetaHuhn/repo-file-sync-action.

10/10

yonasbsd/greptimedb/.github/actions/build-dev-builder-images

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

3/10

rustdesk-org/install-llvm-action-32bit

A GitHub Action for downloading and installing LLVM and Clang 32bit binaries.

step-integration-tests/auto-pdpr-test-40728-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

launchdarkly/ruby-server-sdk-otel/.github/actions/ci

LaunchDarkly SDK OTEL integration for the Ruby server side SDK

step-security/pull-request-comment-trigger/__builder_checkout_dir__/.github/actions/fill

A github action for detecting a "trigger" in a pull request description or comment. Secure drop-in replacement for Khan/pull-request-comment-trigger.

10/10

dustin4444/testcontainers-java/.github/actions/setup-junit-report

Testcontainers is a Java library that supports JUnit tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

5/10

step-security/chart-testing-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to lint and test Helm charts. Secure drop-in replacement for helm/chart-testing-action.

10/10

adishm98/auth-vpn/public-layout.tsx

Self-hosted VPN tunnel for cloud VMs. One binary, one open port, every Docker container becomes privately reachable.

projectdiscovery/actions/setup/git

ProjectDiscovery's Composite Actions

5/10

step-integration-tests/auto-pdpr-test-08660-12/.github/workflows/public-layout.tsx

Test repository created from policy-based-prs template for integration testing