Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

amannn/action-semantic-pull-request

A GitHub Action that ensures that your PR title matches the Conventional Commits spec

4/10

portswigger-tim/safer-runner-action

A GitHub action to lockdown DNS, Network, sudo and Docker

2/10

edera-dev/cross/.github/actions/cargo-publish

“Zero setup” cross compilation and “cross testing” of Rust crates

3/10

step-integration-tests/auto-pdpr-test-84794-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

korniltsev/actions-upload-release-asset

Yet Another Upload Release Asset Action

2/10

aerospike/shared-workflows/.github/actions/collect-build-artifacts

automation workflows

8/10

grafana/opentelemetry-ebpf-instrumentation/.github/actions/integration-test-image-build

5/10

Maintained action available

vendic/magento2-oh-dear-elasticsuite/.github/actions/public-layout.tsx

Add Elasticsuite checks to Vendic/magento2-oh-dear

2/10

launchdarkly/dotnet-sdk-internal/.github/actions/build-release

Implementation details shared between .NET SDK and Xamarin SDK

6/10

docker/bake-action/subaction/xhcyo8/qqq

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10

Maintained action available

taktile-org/wretry.action

Retry action for Github CI

3/10

kong/slsa-github-generator/.github/actions/secure-upload-artifact

Language-agnostic SLSA provenance generation for Github Actions

3/10

rubygems/configure-rubygems-credentials

Configure rubygems.org credential environment variables for use in other GitHub Actions.

6/10

nexusphp/no-merge-commits

Prevent merge commits in pull requests.

5/10

Maintained action available

step-security/setup-applanga-cli/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for applanga/setup-applanga-cli.

8/10

aerospike/aerospike-client-nodejs/.github/actions/run-ee-server

Node.js client for the Aerospike database

5/10

Maintained action available

siemens/ix/.github/workflows/actions/visual-regression

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

6/10

step-security/create-or-update-pull-request-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action to create or update a pull request based on local changes. Secure drop-in replacement for gr2m/create-or-update-pull-request-action.

9/10

diolor/github-action-markdown-link-check

Check all links in markdown files if they are alive or dead. 🔗✔️

3/10

jjgadgets/tj-actions-changed-files

:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.

4/10