Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

chainguard-actions/slackapi-slack-github-action

4/10

Maintained action available

regclient/actions/fill

7/10

taiki-e/cache-cargo-install-action

GitHub Action for `cargo install` with cache.

9/10

polasudo/build-definitions/self/.github/actions/install-tkn

2/10

opcr-io/policy-tag-action

policy-tag-action

4/10

step-security/docker-build-push-action/_next/static/chunks/48234-dabc8ccc8da10d4b.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10

orq-ai/headroom-internal/.github/actions/fill

The Context Optimization Layer for LLM Applications

4/10

sysdiglabs/exporter-builder

3/10

step-security/create-a-file-action

A github action to create a file in your github workflow. Secure drop-in replacement for 1arp/create-a-file-action.

9/10

grafana/grafana/_shared-workflows-dockerhub-login/actions/get-vault-secrets

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10

hpcodecraft/action-deploy-workspace-to-repo

Github action to copy files generated during a workflow run to an external repository

0/10

the-wright-jamie/update-pr-info-action

A GitHub Action that updates a pull request with information extracted from the head and/or base branch name

2/10

step-integration-tests/auto-pdpr-test-74252-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/poseidon-wait-for-status-checks

Mirror from https://github.com/poseidon/wait-for-status-checks

1/10

Maintained action available

fastly/compute-actions/build

GitHub Actions for building on Fastly Compute.

5/10

pravipati-sandbox/codeql-action/analyze

Actions for running CodeQL analysis

2/10

sonarsource/sonar-scanner-python/.github/actions/integration-tests

A wrapper around SonarScanner CLI, available on PyPI.

7/10

dustin4444/react-native/.github/actions/setup-xcode

A framework for building native applications using React

3/10

step-security/auto-assign-action/__builder_checkout_dir__/.github/actions/privacy-check

An action which adds reviewers to the pull request when the pull request is opened. Secure drop-in replacement for kentaro-m/auto-assign-action.

8/10

oxidize-rb/actions/cross-gem

4/10

Maintained action available