Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

sonarsource/sonar-java-jdt/.actions/get-build-number

Packaging of Eclipse's Java Development Tools for SonarJava

7/10

step-integration-tests/auto-pdpr-test-34900-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

politicalsphere/ci/.github/actions/ps-lint-tools

CI/CD pipelines and GitHub Actions for Political Sphere

3/10

Maintained action available

nx1x/cloudflare-warp-action/cleanup

Headless Cloudflare WARP enrollment for GitHub Actions runners. Full network access via your Zero Trust org.

6/10

step-security/get-xml-info/__builder_checkout_dir__/.github/actions/privacy-check

Get Information from XML files to use into your GitHub workflows. Secure drop-in replacement for mavrosxristoforos/get-xml-info.

10/10

lucacome/draft-release

Draft the next GitHub release

5/10

Maintained action available

nvidia/cuda-quantum/.github/actions/matrix-outputs-write

C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows

8/10

nvidia/spark-rapids-common/shell-check

Reusable GitHub Actions workflows and common scripts for Spark RAPIDS

4/10

panva/node/.github/actions/install-clang

Node.js JavaScript runtime :sparkles::turtle::rocket::sparkles:

4/10

Maintained action available

jsoref/image

Work with containers' images

3/10

step-security/jest-coverage-action-demo/.github/actions/test

9/10

sonarsource/sonarlint-language-server/.actions/get-build-number

Language Server for SonarQube for VSCode

6/10

ministryofjustice/laa-data-claims-api/.github/actions/deploy

LAA Data Claims API

8/10

ethlimo/ens-hooks/.github/actions/sbom

TypeScript library for encoding, decoding, and executing EIP-8121 hooks with ERC-7930 interoperable addresses

3/10

deepcode-ai/llama.cpp/.github/actions/windows-setup-curl

Port of Facebook's LLaMA model in C/C++

5/10

Maintained action available

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/cloud-platform-auth

Github actions for HMPPS projects

6/10

yonasbsd/wazuh/.github/actions/4_operational_prerelease_coverity_issue

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10

Maintained action available

mattermost/action-mattermost-notify

GitHub Action for sending a notification to a Mattermost channel

3/10

celo-org/kona/.github/actions/image

Monorepo for OP Stack Types, Components, and Services built in Rust.

2/10

notaryproject/notation-action/verify

GitHub Actions for signing and verifying artifacts with Notation

5/10