Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-20483-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/jest-coverage-action-demo/__builder_checkout_dir__/.github/actions/privacy-check

9/10

rapidsai/node/.github/actions/image

GPU-accelerated data science and visualization in node

3/10

scitt-community/scitt-api-emulator

SCITT API Emulator

0/10

rustcrypto/actions/fill

GitHub Actions configs: composite actions and shared workflow configuration

3/10

Maintained action available

ministryofjustice/laa-ccw-fees-ui/.github/actions/setup

UI for CCW Fees Calculator

4/10

step-integration-tests/auto-pdpr-test-56435-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sonarsource/sonarjs/.actions/get-build-number

SonarSource Static Analyzer for JavaScript and TypeScript

4/10

Maintained action available

ministryofjustice/ndelius-um/.github/actions/fill

NDelius User Management Tool

4/10

jackyef/bundlewatch-gh-action

GitHub action that allows you to easily run bundlewatch in your repository 📦

2/10

step-security/vitest-coverage-report-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to report vitest test coverage results. Secure drop-in replacement for davelosert/vitest-coverage-report-action.

10/10

sonarsource/sonarqube-webapp/.github/actions/fill

SonarQube Community Build Web App

6/10

dflook/tofu-fmt-check

GitHub action to check the formatting of OpenTofu files

3/10

step-security/trinodb-github-actions/block-commits

Github actions used in the Trino project. Secure drop-in replacement for trinodb/github-actions.

9/10

Maintained by StepSecurity

step-security/github-action-helm3

Slim wrapper around helm3. Secure drop-in replacement for WyriHaximus/github-action-helm3.

10/10

Maintained by StepSecurity

condenast/conventional-pull-request-action

Lint pull requests with the conventional commit spec, for a clean and conventional commit history

4/10

ministryofjustice/laa-data-claims-api/.github/actions/public-layout.tsx

LAA Data Claims API

8/10

bytemare/workflows/actions/ort-report

A collection of hardened reusable Github Workflows.

5/10

aerospike/aerospike-client-c/.github/actions/get-version

Aerospike C Client

6/10

useblacksmith/run-testbox

3/10