Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

dbarrett24/supply-chain-ci/actions/npm-supply-chain

Reusable GitHub Actions: npm/pnpm/yarn supply-chain CI gates (OSV, audit-ci, campaign IOCs). Not SpecTackler. Not endpoint remediation.

3/10

h0x0er/thecombine/.github/actions/fill

This is a tool for supporting the rapid word collection workshop and post workshop clean-up

2/10

v1vhm/github-repo-provisioning/.github/actions/commit-yaml

2/10

step-integration-tests/auto-pdpr-test-29182-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

bcgov/action-pr-description-add

GitHub Action to change Pull Request descriptions.

6/10

step-security/add-pr-comment/_next/static/chunks/e708387d-56132cd7b2888090.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10

ggml-org/ccache-action

github action to speedup building using ccache

5/10

Maintained action available

step-security/zizmor-action/__builder_checkout_dir__/.github/actions/privacy-check

Run zizmor from GitHub Actions!. Secure drop-in replacement for zizmorcore/zizmor-action.

10/10

dustin4444/next.js/.github/actions/next-stats-action

The React Framework

5/10

Maintained action available

nvidia/gpu-driver-container/.github/actions/set-cve-updates

The NVIDIA GPU driver container allows the provisioning of the NVIDIA driver through the use of containers.

8/10

shogo82148/actions-setup-mysql

6/10

snyk/actions/elixir-1.18

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

grafana/shared-workflows/actions/docker-import-digests-push-manifest

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

grafana/lapo-docs/github-actions/image

0/10

sasobadovinac/freecad/.github/workflows/actions/linux/generatecachekey

Fork of the official git master branch of FreeCAD

7/10

step-security/setup-ndk

Setup your GitHub Actions workflow with a specific version of the Android NDK. Secure drop-in replacement for Arqu/setup-ndk.

10/10

Maintained by StepSecurity

step-security/publish-unit-test-result-action/misc/action/image

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

8/10

thedannicraft/next.js/.github/actions/next-integration-stat

The React Framework

2/10

dmptrluke/django-formguard/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Layered anti-bot form protection for Django (now with Turnstile!)

5/10

Maintained action available

rotemk1/auto-unapprove

3/10