Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

sonarsource/sonar-scanner-jenkins/.actions/get-build-number

SonarQube Scanner for Jenkins

5/10

patrickedqvist/wait-for-vercel-preview

A github action for waiting for the vercel preview

4/10

skills/exercise-toolkit/actions/file-exists

Toolkit to standardize and reuse common parts of Skills exercises

5/10

italia/publiccode-parser-action

A simple Github action to validate publiccode.yml

3/10

step-integration-tests/auto-pdpr-test-07769-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sonarsource/gh-action_dogfood_merge

6/10

step-security/softprops-turnstyle/__builder_checkout_dir__/.github/actions/image

🎟️A GitHub Action for serializing workflow runs. Secure drop-in replacement for softprops/turnstyle.

10/10

grafana/shared-workflows/_shared-workflows-publish-techdocs/actions/techdocs-rewrite-relative-links

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

equinor/xtgeo/.github/actions/setup_xtgeo

XTGeo Python class library for subsurface Surfaces, Cubes, Wells, Grids, Points, etc

7/10

oxsecurity/megalinter/flavors/internal/backend/remote-state/consul

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10

equitybee/team-label-action

⚡️ Auto-label PRs based on the author's team memberships 👥

3/10

achrinza/setup-db2

Setup a dev DB2 LUW for plain Linux and GitHub Actions

3/10

Maintained action available

caffeelake/aivisspeech/.github/actions/download-engine

AivisSpeech: AI Voice Imitation System - Text to Speech Software

3/10

Maintained action available

extractions/setup-just

🤖 GitHub Action to install the just command runner

5/10

mattaschmann/sync-up-to-codecommit-action

Sync Github to CodeCommit

3/10

elastic/apm-agent-java/.github/workflows/fill

8/10

vimtor/action-zip

🗄️ Action for zipping files easily

4/10

step-security/get-user-teams-membership/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to get a user teams membership in a given organization. Secure drop-in replacement for tspascoal/get-user-teams-membership.

10/10

step-integration-tests/auto-pdpr-test-87792-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-01811-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10