Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

kolide/expo-fork/.github/actions/image

Our fork of expo

3/10

bigorno12/ci-cd-templates/.github/actions/ghcr-cleanup

Centralized CICD

4/10

opensource-nepal/commitlint

Lint Conventional Commit message on GitHub Actions and pre-commit.

6/10

step-integration-tests/auto-pdpr-test-66909-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

elastic/elastic-github-actions/public-layout.tsx

This action spins up an Elasticsearch instance that can be accessed and used in your subsequent steps.

6/10

coveooss/areas

GitHub action to manage the ownership of code areas and its PR reviews and labeling

2/10

Maintained action available

elastic/docs-actions/vale/report

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-79603-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

surrealdb/rocksdb/.github/actions/install-gflags-on-macos

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

dustin4444/slsa-github-generator/.github/actions/generate-attestations

Language-agnostic SLSA provenance generation for Github Actions

3/10

step-integration-tests/auto-pdpr-test-74252-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

pandaswhocode/rootly-alert-action

Implements the rootly creates an alert api

3/10

step-integration-tests/auto-pdpr-test-73921-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nodenv/actions/setup-nodenv

Leverage nodenv within GitHub Actions

5/10

Maintained action available

agslima/app-stayhealthy-pipeline/.github/actions/validate-kubernetes-manifests

Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.

6/10

dawidd6/action-send-mail/_next/static/chunks/11621-dab816603cd195b7.js

:gear: GitHub Action for sending emails

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-69915-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

kong/release-downloader

Github action to download release assets from private or public repositories

2/10

damacus/robovac/.github/actions/setup-python-env

Control your Eufy RoboVac from Home Assistant

6/10

slsa-framework/slsa-github-generator/.github/actions/secure-checkout

Language-agnostic SLSA provenance generation for Github Actions

4/10