Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

graycoreio/github-actions-magento2/get-magento-version

Github Actions and Workflows that make maintaining Magento2 stores and modules significantly easier.

4/10

Maintained action available

lfreleng-actions/maven-build-action

Action to build Maven projects

8/10

nam20485/docs-1/.github/actions/clone-translations

The open-source repo for docs.github.com

0/10

sgammon/verify-hashes

Library, CLI, and GitHub Action for verifying hashes

4/10

dustin4444/backtrace-javascript/.github/actions/smoke-tests

Backtrace error reporting for JavaScript languages

5/10

Maintained action available

step-security/allure-report-action/__builder_checkout_dir__/.github/actions/privacy-check

Allure Report action with history. Secure drop-in replacement for simple-elf/allure-report-action.

10/10

asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-icon.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10

step-integration-tests/auto-pdpr-test-58684-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

udoprog/kick

The omnibus project management tool

2/10

Maintained action available

sonarsource/core-languages-tooling-public/ruling-update-and-notify

Development tooling for .NET — For artifacts accessible from public repos

5/10

Maintained action available

githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289%20githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289

GitHub token permissions Monitor and Advisor actions

2/10

step-integration-tests/auto-pdpr-test-99381-6/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

cloudposse/github-action-validate-codeowners

GitHub Action to Validate CODEOWNERS

4/10

openzeppelin/openzeppelin-sui-amm/.github/actions/fill

4/10

allenai/beaker-run-action

A GitHub Action for running Beaker jobs

4/10

actions/cache/image

Cache dependencies and build outputs in GitHub Actions

3/10

sonarsource/gh-action_release/image

6/10

ai-dynamo/dynamo/.github/actions/check-deploy-component

A Datacenter Scale Distributed Inference Serving Framework

4/10

Maintained action available

step-security/sticky-pull-request-comment

Create comment on pull request, if exists update that comment. Secure drop-in replacement for marocchino/sticky-pull-request-comment.

8/10

Maintained by StepSecurity

nvidia/aicr/.github/actions/install-karpenter-kwok

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10