Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

tanker187/node-semver/.github/actions/install-latest-npm

The semver parser for node (the one npm uses)

6/10

miraai/read-helm-chart-yaml

Read Chart.yaml file from Helm Charts

3/10

projectdiscovery/actions/pr/merge

ProjectDiscovery's Composite Actions

5/10

Maintained action available

bazelbuild/continuous-integration/actions/public-layout.tsx

Bazel's Continuous Integration Setup

6/10

step-security/setup-terraform/__builder_checkout_dir__/.github/actions/public-layout.tsx

Sets up Terraform CLI in your GitHub Actions workflow. Secure drop-in replacement for hashicorp/setup-terraform.

10/10

aerospike/aerospike-client-python/.github/actions/wait-for-ce-server-to-start

Aerospike Python Client

4/10

step-integration-tests/auto-pdpr-test-07333-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

codecov/basic-test-results

GitHub Actions to collect test results and emit a PR comment about the test status.

5/10

step-integration-tests/auto-pdpr-test-60558-4/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

chainguard-actions/actions-cache/restore

2/10

yonasbsd/neon/.github/actions/run-python-test-set

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

2/10

ministryofjustice/money-to-prisoners-send-money/.github/actions/clean-ecr

Send money to someone in prison

8/10

secretonline/secrets-pack/.github/actions/update-project-changelog

A modpack for technical players on Vanilla servers.

3/10

Maintained action available

launchdarkly/android-client-sdk/.github/actions/publish-docs

LaunchDarkly Client-side SDK for Android

5/10

Maintained action available

yonasbsd/authentik/.github/actions/comment-pr-instructions

The authentication glue you need.

4/10

Maintained action available

haya14busa/action-workflow_run-status

✅ The missing status check utility for workflow_run action.

2/10

nvidia-nemo/automodel/.github/actions/test-template

🚀 Pytorch Distributed native training library for LLMs/VLMs with OOTB Hugging Face support

8/10

fish-shop/install-plugin

A GitHub action for installing fish shell plugins.

8/10

step-integration-tests/auto-pdpr-test-57274-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

atomicjar/testcontainers-cloud-setup-action

Github Cloud Action to Download and Configure Testcontainers Cloud Agent

4/10