Assess the risk of third-party GitHub Actions

step-security/docker-build-push-action/_next/static/chunks/24692-7d12a5de6cc02590.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

anchore/stereoscope/.github/actions/bootstrap

go library for processing container images and simulating a squash filesystem

ministryofjustice/hmpps-temporary-accommodation-ui/.github/actions/image

The user interface for the Temporary Accommodation Service

step-security/add-pr-comment/_next/static/chunks/40300-e26a046d4034a815.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

ministryofjustice/laa-info-and-advice-datastore/.github/actions/deploy

Info & Advice Datastore

caffeelake/external-secrets/.github/actions/e2e-managed

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

stakekit/safe-wallet-web/.github/workflows/cypress

Safe{Wallet} – smart contract wallet for Ethereum (ex-Gnosis Safe multisig)

3/10

softprops/action-gh-release/_next/static/chunks/f1bddbd1-f81489e8995da509.js

📦 :octocat: GitHub Action for creating GitHub Releases

4/10

grafana/writers-toolkit/actions/fill

Technical documentation guidelines for Grafana Labs documentation

8/10

launchdarkly/opencensus-go-exporter-stackdriver/.github/actions/get-go-version

OpenCensus Go exporter for Stackdriver Monitoring and Trace

6/10

tanker187/stagehand/.github/actions/setup-node-pnpm-turbo

The AI Browser Automation Framework

checkmarxdev/cx-arch-llama-cpp/.github/actions/windows-setup-rocm

LLM inference in C/C++

4/10

kong/cloud-github-actions/changelog

0/10

imaralabs-ai/coder/.github/actions/setup-go-paths

Secure environments for developers and their agents

4/10

docker/bake-action/%22-xivy24-%22/list-targets

GitHub Action to use Docker Buildx Bake as a high-level build command

step-security/github-action-aerospike/_next/static/chunks/webpack-9bb263ce08e1a87c.js

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

step-security/setup-kubectl/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for installing Kubectl. Secure drop-in replacement for Azure/setup-kubectl.

frenck/action-setup-yq

🚀 Frenck's GitHub Action for setting up yq