Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
anolilab/workflows/step/codecov
Shared Github Actions for Node.js projects and Monorepos.
jasonkarns/setup-homebrew
Set up Homebrew and (optionally) taps
step-security/create-or-update-pull-request-action/__builder_checkout_dir__/.github/actions/privacy-check
A GitHub Action to create or update a pull request based on local changes. Secure drop-in replacement for gr2m/create-or-update-pull-request-action.
launchdarkly/ldcli/.github/actions/publish-npm
The official command line interface for managing LaunchDarkly feature flags.
int128/kustomize-action
Run kustomize build in parallel in GitHub Actions
launchdarkly/openfeature-dotnet-server/.github/actions/build-docs
An OpenFeature provider for the LaunchDarkly dotnet server SDK.
envoyproxy/toolshed/gh-actions/github/checkout
step-security/tauri-action
Build your Web application as a Tauri binary for macOS, Linux and Windows. Secure drop-in replacement for tauri-apps/tauri-action.
useblacksmith/golangci-lint-action
Official GitHub Action for golangci-lint using the Blacksmith cache
open-component-model/ocm-setup-action
GitHub Action installing the OCM command-line tool
yonasbsd/greptimedb/.github/actions/setup-etcd-cluster
An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.
dmnemec/copy_file_to_another_repo_action
This GitHub Action copies a file from the current repository to a location in another repository
nschloe/action-cached-lfs-checkout
GitHub checkout action with LFS files pulled from cache
gitguardian/ggshield/actions/secret
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
kroxylicious/kroxylicious/.github/actions/common/slack-notification
Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ
step-security/split-strings
Github Action for splitting strings into parts by separator with limit. Secure drop-in replacement for xom9ikk/split.
adrise/matter-casting/.github/actions/dump-disk-info
Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.
ledgerhq/ledger-live/tools/actions/fill
Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.
sonarsource/sonar-plugin-api/.actions/get-build-number
API to develop plugins for SonarQube (Server, Cloud) and SonarQube for IDE
cenkalti/backoff
โฑ The exponential backoff algorithm in Go