Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-integration-tests/auto-pdpr-test-42825-8/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
beer-sakthai/codeql-action/../action/.github/actions/check-codescanning-config
Actions for running CodeQL analysis
checkmarx/kics-action
GitHub actions of KICS scan - Keeping Infrastructure as Code Secure
neonidian/teams-notify-build-status
GitHub action: Send message to channel(s) in Microsoft Teams
step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/secure-download-artifact
Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.
testifysec/witness-run-action
kolide/expo-fork/.github/actions/use-android-emulator
Our fork of expo
step-security/install-datadog-ci-github-action
Secure drop-in replacement for DataDog/install-datadog-ci-github-action.
iwamot/actions/go-publish
iwamot's shared GitHub Actions composite actions.
chainguard-actions/docker-metadata-action
hkwi/kroxylicious/.github/actions/common/cache-maven-packages
Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ
hashicorp/tfc-workflows-github/actions/apply-run
HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.
yonasbsd/pest/.github/actions/%5c%5c%5c%22https%3a/blog.rust-lang.org/2024/11/28/rust-1.83.0/%5c%5c%5c%22%5cu003e%5cu003cimg
The Elegant Parser
step-security/release-downloader
Github action to download release assets from private or public repositories. Secure drop-in replacement for robinraju/release-downloader.
tempoxyz/gh-actions/vendor/gradle/actions/setup-gradle
Reusable GitHub Actions for Tempo
launchdarkly/gha-ld-gosec
Runs gosec then uploads results to s3 and workflow artifacts.
step-security/action-openfga-test
Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.
nvidia/k8s-test-infra/control/.github/actions/repo-automation
Simulate NVIDIA infrastructure (e.g. GPU) on CPU nodes in Kubernetes :coffee:๏ธ
meilcli/gradle-update-check-action
gradle maven new package version check action for GitHub Actions.
richardmcsong/actions/pr-sync
Custom actions for automating Backstage workflows