Assess the risk of third-party GitHub Actions

Tsukimarf/docs/.github/actions/labeler

The open-source repo for docs.github.com

2/10

modeseven-lfreleng-actions/pypi-publish-action

Publishes a Python project to the Python Package Index (PyPI)

hashicorp/tfc-workflows-github

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

7/10

martincostello/update-dotnet-sdk

A GitHub Action that updates the .NET SDK

7/10

egor-tensin/vs-shell

GitHub action to set up the Visual Studio shell environment

5/10

FirebaseExtended/action-hosting-deploy

Automatically deploy shareable previews for your Firebase Hosting sites

coveo/ui-kit/.github/actions/e2e-stencil

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

slsa-framework/slsa-github-generator/.github/actions/verify-token

Language-agnostic SLSA provenance generation for Github Actions

Codesee-io/codesee-action

yonasBSD/opendal/.github/actions/test_behavior_binding_nodejs

Apache OpenDAL: access data freely.

rapidsai/node/.github/actions/build-and-publish-image

GPU-accelerated data science and visualization in node

yonasBSD/libsignal/.github/actions/restore-cargo-cache

Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible.

step-security/setup-protoc/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub Action to setup the protoc compiler for protocol buffers. Secure drop-in replacement for arduino/setup-protoc.

9/10

snapshift/action-check-typescript

2/10

grafana/synthetic-monitoring-agent/.github/actions/go-cache-save

Synthetic Monitoring agent

8/10

eseay/setup-git-credentials

GitHub action to clone private respositories.

dtolnay/install

Fast `cargo install` action using a GitHub-based binary cache and attestations

rematocorp/open-pull-request-action

GitHub action for automatically creating a pull request

winterjung/split

GitHub action to split string