Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

apecloud-inc/setup-k3d-k3s

Setup K3d/K3s for GitHub Actions

3/10

celestiaorg/.github/.github/actions/yamllint

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-20032-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/filter-sarif/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for filtering Code Scanning alerts by path and id. Secure drop-in replacement for advanced-security/filter-sarif.

10/10

step-integration-tests/auto-pdpr-test-56435-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

dawidd6/action-send-mail/_next/static/chunks/app/layout-0b9a0349b9072b1c.js

:gear: GitHub Action for sending emails

5/10

Maintained action available

libsdl-org/setup-sdl

GitHub action for providing SDL.

1/10

Maintained action available

ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/build_multiplatform_docker

HMPPS Manage People on Probation UI

8/10

step-security/envsubst-action/__builder_checkout_dir__/.github/actions/privacy-check

Github Action for envsubst. Secure drop-in replacement for danielr1996/envsubst-action.

10/10

coinbase/cb-mpc/vendors/github-action-benchmark

Coinbase MPC Library

5/10

Maintained action available

sonarsource/core-languages-tooling-public/pvf-comment

Development tooling for .NET — For artifacts accessible from public repos

6/10

anchore/go-lzo/.github/actions/image

A LZO1X decompression library written in go that is permissively licensed

7/10

camunda/infra-global-github-actions/fossa/public-layout.tsx

Small Github Actions maintained by Infra team and used by other teams inside Camunda

6/10

suzuki-shunsuke/commit-action/js

GitHub Action to push changes to remote branches by GitHub API. You can create verified commits using GitHub App.

6/10

step-security/conditional-build-matrix/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action that enables easier conditional matrix builds!. Secure drop-in replacement for JoshuaTheMiller/conditional-build-matrix.

10/10

sasobadovinac/tldraw/.github/actions/setup

whiteboard / infinite canvas SDK

2/10

zg9vfpp47z-dotcom/agent-governance-toolkit/.github/actions/contributor-check

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

3/10

cyber-dojo/download-artifact

Composite workflow to download a docker image created by reusable-actions-workflows' secure-docker-build workflow.

3/10

step-security/super-linter/public-layout.tsx

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10

deepcode-ai/codeql/codeql/.github/actions/fetch-codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

2/10