Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/static-web-apps-deploy/__builder_checkout_dir__/.github/actions/privacy-check

Enable GitHub developers to deploy to Azure Static Web Apps using GitHub Actions. Secure drop-in replacement for azure/static-web-apps-deploy.

10/10

ivanzati/physical-ai-studio/.github/actions/docker-build

Physical AI Studio is an end-to-end framework for training robots to perform tasks through imitation learning from human demonstrations.

5/10

seagate/actions-dco

GitHub Actions that enforces the Developer Certificate of Origin (DCO) on Pull Requests

3/10

advanced-security/spdx-dependency-submission-action

upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API

7/10

metamask/github-tools/.github/actions/check-skip-merge-queue

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

5/10

Maintained action available

openzeppelin/openzeppelin-contracts-upgradeable/.github/actions/storage-layout

Upgradeable variant of OpenZeppelin Contracts, meant for use in upgradeable contracts.

5/10

Maintained action available

turing85/publish-report

This action allows us to publish reports as github-actions check and produce comments on Pull requests with a summary of the report.

4/10

firebelley/godot-export

Automatically exports your Godot games.

4/10

step-security/docker-swiftlint/.github/actions/tags_for_latest

Docker image of SwiftLint on ubuntu

10/10

step-integration-tests/auto-pdpr-test-01811-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

neondatabase/schema-diff-action

A GitHub Action to post schema changes in your PR comments.

3/10

step-security/update-pr-description

GitHub Action to update pull request descriptions. Secure drop-in replacement for nefrob/pr-description.

9/10

Maintained by StepSecurity

yonasbsd/opendal/.github/actions/test_behavior_binding_nodejs

Apache OpenDAL: access data freely.

5/10

Maintained action available

chainguard-dev/actions/melange-build-pkg

A collection of reusable Github Actions workflows.

6/10

actions/cache

Cache dependencies and build outputs in GitHub Actions

6/10

step-security/gha-setup-vsdevenv/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to setup the VS dev environment for the job. Secure drop-in replacement for compnerd/gha-setup-vsdevenv.

10/10

celfons/agents-default-actions-template/.github/actions/public-layout.tsx

4/10

chainguard-dev/actions/setup-k3d

A collection of reusable Github Actions workflows.

6/10

kerhub/saved-replies

Simplify your communication workflow with a simple, yet powerful, GitHub Action!

3/10

mishakav/jest-coverage-comment

Comments a pull request or commit with the jest code coverage badge, full report and tests summary

7/10