Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

r-lib/actions/check-r-package

GitHub Actions for the R community

9/10

step-security/protobuf-ci/__builder_checkout_dir__/.github/actions/privacy-check

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

rapidsai/velox-testing/velox-testing/.github/actions/container-registry-login

7/10

hyperledger/indy-shared-gha/.github/actions/set-version

4/10

hytromo/mimosa/gh/setup-action

Zero-config docker image promotion

2/10

kong/gateway-test-scheduler/schedule

Automatic test scheduler for Kong Gateway CI testing

1/10

grafana/grafana/pkg/build/actions/bump-version

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10

paddlehq/modfmt/.github/workflows/setup-go

Tidy up your go.mod files by merging the require blocks

3/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/personal-background/public-layout.tsx

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

open-edge-platform/orch-ci/discover-changed-files

Central hub for shared continuous integration (CI) workflows and actions for the Open-Edge-Platform project

8/10

dschep/install-poetry-action

A Github action to install poetry

2/10

elastic/docs-actions/aws/auth

6/10

nvidia/infra-controller-core/.github/actions/image

NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking

6/10

febiosoftware/febio-workflows/.github/actions/image

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

3/10

Maintained action available

step-security/slash-command-dispatch/__builder_checkout_dir__/.github/actions/public-layout.tsx

A GitHub action that facilitates "ChatOps" by creating repository dispatch events for slash commands. Secure drop-in replacement for peter-evans/slash-command-dispatch.

9/10

yonasbsd/paradedb/.github/actions/fill

ParadeDB is a modern Elasticsearch alternative built on Postgres. Built for real-time, update-heavy workloads.

5/10

Maintained action available

azure/setup-kubectl

GitHub Action for installing Kubectl

9/10

step-security/backstage-entity-validator/__builder_checkout_dir__/.github/actions/fill

Validate properties and well known annotations in your Backstage catalog-info.yaml files. Secure drop-in replacement for roadiehq/backstage-entity-validator.

9/10

gregclermont/actions-permissions/monitor

GitHub token permissions Monitor and Advisor actions

2/10

jonathancombs782/bitcoin/.github/actions/restore-caches

Bitcoin Core integration/staging tree

6/10