Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
cyclonedx/gh-gomod-generate-sbom
GitHub action to generate a CycloneDX SBOM for Go modules
sonarsource/sonar-html/.actions/config-maven
Static analyzer for HTML used in Sonar ecosystem
hiero-ledger/solo/.github/actions/solo-image-cache
An opinionated CLI tool to deploy and manage standalone test networks.
smartcontractkit/.github/actions/parse-and-mask-test-secrets
reusable GHA workflows and actions
flcdrg/replace-multiple-action
GitHub Action to replace multiple strings in files
jupyterlab/maintainer-tools/.github/actions/base-setup
Workflows and Actions meant to be used by other repositories to make repo maintenance easier
step-security/deployment-status/__builder_checkout_dir__/.github/actions/secure-download-artifact
GitHub action to create a deployment status update. Secure drop-in replacement for chrnorm/deployment-status.
kong/kongponents/.github/actions/ksai/.github/actions/ai-reviewer-federated
๐ฆ Kong Vue Component Library
step-integration-tests/auto-pdpr-test-28960-12/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
hashicorp/actions-docker-build
Docker Build Action for CRT
tbhb/github-actions/.github/actions/setup-just
Shared composite actions, reusable workflows, and Renovate presets for tbhb repositories
dustin4444/cache
Cache dependencies and build outputs in GitHub Actions
yonasbsd/testcontainers-node/.github/actions/public-layout.tsx
Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.
danysam/gcs-cache/public-layout.tsx
Cache dependencies and build outputs in GitHub Actions using Google Cloud Storage
0xsequence/actions/git-commit
Common Github Actions
espressif/sync-jira-actions
GitHub Actions for syncing the project with the Espressif Jira system
fish-shop/run-fishtape-tests
A GitHub action for running Fishtape tests.
kachick/wait-other-jobs
โ Wait for jobs, even across workflows
sonatype/actions/image
Public repository to keep Sonatype's GitHub Actions.
step-security/docker-build-push-action/_next/static/chunks/26927-93feb3475da0a4d5.js
GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.