Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
caffeelake/claude-code/.github/actions/claude-code-action
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
step-security/action-add-labels
๐ท๏ธ GitHub Action to add labels. Secure drop-in replacement for actions-ecosystem/action-add-labels.
sonarsource/sonarqube-scan-action/image
step-security/ghaction-setup-containerd
GitHub Action to set up containerd. Secure drop-in replacement for crazy-max/ghaction-setup-containerd.
step-security/github-app-token/__builder_checkout_dir__/.github/actions/privacy-check
Impersonate a GitHub App in a GitHub Action. Secure drop-in replacement for tibdex/github-app-token.
rickstaa/action-update-semver
Updates major/minor release tags on a tag push.
vmactions/netbsd-vm
Test your code in a real NetBSD virtual machine on GitHub Actions -- QEMU-powered, with SSH and two-way folder sync
technote-space/create-pr-action
GitHub Actions to manage PullRequest
dopplerhq/secrets-fetch-action
Securely inject Doppler secrets into your GitHub Actions.
bjia56/setup-cosmocc
Download and install cosmocc on GitHub Actions
grafana/loki/actions/metrics-collector
Like Prometheus, but for logs.
arduino/setup-protoc
GitHub Action to setup the protoc compiler for protocol buffers
nvidia/cccl-gha/.github/actions/image
Github Action infrastructure for CCCL
step-security/actions-label-merge-conflict
GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.
step-security/slsa-github-generator/.github/actions/null
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.
yonasbsd/joplin/.github/workflows/shared/setup-build-environment
Joplin - an open source note taking and to-do application with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.
elide-tools/setup-llvm
A GitHub Action for downloading and installing LLVM and Clang binaries.
takaishi/tfclean
tfclean is tool to remove applied moved block, import block, etc
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-json/oembed/1.0/embed/index.html
This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.
agslima/app-stayhealthy-pipeline/.github/actions/resolve-run-metadata
Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.