Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

marvinpinto/action-automatic-releases

READONLY: Auto-generated mirror for https://github.com/marvinpinto/actions/tree/master/packages/automatic-releases

5/10

pytorch/pytorch/.github/actions/binary-docker-build

Tensors and Dynamic neural networks in Python with strong GPU acceleration

6/10

nick-fields/assert-action

Performs different types of assertions for use in an Action workflow. This is intended to be used to validate outputs and helpful in writing integration tests of Actions.

3/10

grafana/scenes/.github/actions/yarn-nm-install

Build Grafana dashboards directly in your Grafana app plugins.

6/10

anthropics/claude-code-action

9/10

coveo/ui-kit/.github/actions/e2e-headless-ssr-app

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

5/10

Maintained action available

step-security/get-cmake/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Install and Cache latest CMake and Ninja for your workflows on your GitHub. Secure drop-in replacement for lukka/get-cmake.

10/10

sonarsource/sonarcloud-github-c-cpp

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

7/10

ultralytics/actions

Ultralytics GitHub Actions

8/10

arduino/setup-task

GitHub Actions action to make Task available for use in your workflow

8/10

step-security/foundry-toolchain/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub action to install Foundry. Secure drop-in replacement for foundry-rs/foundry-toolchain.

10/10

brpaz/hadolint-action

GitHub action for Hadolint, A Dockerfile linting tool

4/10

actions/github-app-token

GitHub Action for creating a GitHub App Installation Access Token

7/10

elastic/apm-agent-java/.github/workflows/maven-goal-jdk

8/10

os-climate/osc-github-devops/.github/actions/repository-scan-content-action

Template Python project, common tests, GitHub Actions/Workflows, linting tools

5/10

Maintained action available

Vendic/clickup-set-custom-field-value

Github action to set a task custom field value in Clickup using the Clickup API.

0/10

step-security/rust-cache

A GitHub Action that implements smart caching for rust/cargo projects. Secure drop-in replacement for Swatinem/rust-cache.

10/10

Maintained by StepSecurity

pytorch/rl/test-infra/.github/actions/teardown-windows

A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.

3/10

Maintained action available

step-security/action-discord/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

🚀 GitHub Action that sends a Discord message. . Secure drop-in replacement for Ilshidur/action-discord.

10/10

backstage/actions/re-review

Custom actions for automating Backstage workflows

3/10