Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

grafana/grafana/_shared-workflows-dockerhub-login/actions/get-vault-secrets

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10

hpcodecraft/action-deploy-workspace-to-repo

Github action to copy files generated during a workflow run to an external repository

0/10

the-wright-jamie/update-pr-info-action

A GitHub Action that updates a pull request with information extracted from the head and/or base branch name

2/10

step-integration-tests/auto-pdpr-test-74252-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/poseidon-wait-for-status-checks

Mirror from https://github.com/poseidon/wait-for-status-checks

1/10

Maintained action available

fastly/compute-actions/build

GitHub Actions for building on Fastly Compute.

7/10

pravipati-sandbox/codeql-action/analyze

Actions for running CodeQL analysis

2/10

dustin4444/react-native/.github/actions/setup-xcode

A framework for building native applications using React

5/10

Maintained action available

step-security/auto-assign-action/__builder_checkout_dir__/.github/actions/privacy-check

An action which adds reviewers to the pull request when the pull request is opened. Secure drop-in replacement for kentaro-m/auto-assign-action.

8/10

oxidize-rb/actions/cross-gem

3/10

ljharb/actions/vlt/install

GitHub actions I use for CI.

5/10

Maintained action available

anbiona/gale/__builder_checkout_dir__/.github/actions/privacy-check

Hardened personal server based on secureblue.

6/10

beer-sakthai/codeql-action/../action/.github/actions/check-sarif

Actions for running CodeQL analysis

3/10

fletort/jinja2-template-action

Use Jinja2 template engine on multipe files as a GitHub action

3/10

slsa-framework/github-actions-demo

Proof-of-concept SLSA provenance generator for GitHub Actions

0/10

launchdarkly/ruby-server-sdk-otel/.github/actions/publish

LaunchDarkly SDK OTEL integration for the Ruby server side SDK

4/10

dolthub/upload-release-asset

An Action to upload a release asset via the GitHub Release API

2/10

openvisualcloud/media-transport-library/.github/actions/image

A real-time media transport (DPDK, AF_XDP) stack for both raw and compressed video based on COTS hardware.

5/10

Maintained action available

ai-dynamo/modelexpress/.github/actions/public-layout.tsx

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10

project-tick/project-tick/.github/actions/image

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10