Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

caffeelake/authentik/.github/actions/comment-pr-instructions

The authentication glue you need.

4/10

Maintained action available

microsoft/typescript-twoslash-repro-action

A GitHub Action which evaluates twoslash bug reproductions in GitHub Issues

3/10

aptos-labs/setup-buildx-action

GitHub Action to set up Docker Buildx

4/10

Maintained action available

dustin4444/electron/src/electron/.github/actions/install-build-tools

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-88903-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

rmacklin/fetch-through-merge-base

A GitHub Action for fetching PR commits through the merge-base

3/10

step-integration-tests/auto-pdpr-test-20565-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

jgillis/delete-release-assets

GitHub action for deleting assets from a GitHub release.

2/10

envoyproxy/toolshed/actions/github/artifact/cache/id

7/10

step-security/docker-build-push-action/_next/static/chunks/24692-7d12a5de6cc02590.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10

anchore/stereoscope/.github/actions/bootstrap

go library for processing container images and simulating a squash filesystem

7/10

ministryofjustice/hmpps-temporary-accommodation-ui/.github/actions/image

The user interface for the Temporary Accommodation Service

7/10

step-security/add-pr-comment/_next/static/chunks/40300-e26a046d4034a815.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10

ministryofjustice/laa-info-and-advice-datastore/.github/actions/deploy

Info & Advice Datastore

7/10

caffeelake/external-secrets/.github/actions/e2e-managed

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

6/10

stakekit/safe-wallet-web/.github/workflows/cypress

Safe{Wallet} – smart contract wallet for Ethereum (ex-Gnosis Safe multisig)

3/10

softprops/action-gh-release/_next/static/chunks/f1bddbd1-f81489e8995da509.js

📦 :octocat: GitHub Action for creating GitHub Releases

4/10

Maintained action available

grafana/writers-toolkit/actions/fill

Technical documentation guidelines for Grafana Labs documentation

8/10

launchdarkly/opencensus-go-exporter-stackdriver/.github/actions/get-go-version

OpenCensus Go exporter for Stackdriver Monitoring and Trace

6/10

tanker187/stagehand/.github/actions/setup-node-pnpm-turbo

The AI Browser Automation Framework

5/10

Maintained action available