Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
nanzm/get-time-action
Get the time in the specified time zone
optum/react-hooks/.github/actions/setup
ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/public-layout.tsx
HMPPS Manage People on Probation UI
crossplane-contrib/xpkg-action
A @github action for building @crossplane packages
step-security/ad-m-github-push-action/__builder_checkout_dir__/.github/actions/public-layout.tsx
GitHub actions to push back to repository eg. updated code. Secure drop-in replacement for ad-m/github-push-action.
rudderlabs/rudder-looker-actions/.github/actions/build-push-image
Repository for RudderStack Looker Actions.
veracode/github-actions-integration-helper
Helper functions for the Veracode GitHub Workflow integration.
step-integration-tests/auto-pdpr-test-88903-13/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
1466587594/get-current-time
This action sets the current ISO8601 time to the time output and also provides readableTime, formattedTime, and many more digital outputs like year, day, second, etc. Useful for setting build times in subsequent steps, renaming your artifact, or keeping the same recorded time for the entire workflow.
kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/image
Language-agnostic SLSA provenance generation for Github Actions
yonasbsd/turso/.github/shared/install_sqlite
Turso Database is a project to build the next evolution of SQLite.
oxsecurity/megalinter/flavors/ci_light
๐ฆ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
ministryofjustice/opg-github-actions/actions/snyk-scan
OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform
politicalsphere/ci/.github/actions/ps-task/semgrep-cli
CI/CD pipelines and GitHub Actions for Political Sphere
reitzig/actions-asciidoctor
GitHub Action that installs asciidoctor
nvidia/nemoclaw/.github/actions/ci-wechat-runtime-audit
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
shallwefootball/upload-s3-action
github action for upload to S3 โ๏ธ
ozi-project/publish
OZI action - publish releases to PyPI; and mirror releases, signature bundles, and provenance in a tagged release
step-security/maven-dependency-submission-action
GitHub Action for submitting Maven dependencies. Secure drop-in replacement for advanced-security/maven-dependency-submission-action.
smartcontractkit/chainlink-github-actions/docker/build-push
Common action to run chainlink-testing-framework based tests in github ci