Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

chronograph-pe/report-diffs-action/cloud-compute

Run Meticulous tests

2/10

veeezo/docs-1/.github/actions/public-layout.tsx

The open-source repo for docs.github.com

2/10

grafana/hackathon-12-action-stat

4/10

microsoft/vstest-action

GitHub Action equivalent to the Azure DevOps VS Test Task

4/10

ministryofjustice/laa-certificated-fee-scheme-api/.github/actions/build-and-test

5/10

rapidsai/shared-actions/telemetry-dispatch-write-summary

6/10

step-security/ticket-link-appender

Appends jira or other project board ticket link to description. Secure drop-in replacement for sbimochan/ticket-link-appender.

10/10

Maintained by StepSecurity

step-security/esigner-codesign/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action for CodeSigner by SSL.com. Secure drop-in replacement for sslcom/esigner-codesign.

8/10

dargon789/coinbase-smartcontracts/.github/actions/setup-node

Coinbase Developer ethereum smartcontracts deploy dapp hardhat foundry wagmi remix-project & tenderly verify contract uniswap 1inch defi dex onchain

7/10

launchdarkly/ld-relay/.github/actions/install-relay

LaunchDarkly Relay Proxy

5/10

Maintained action available

step-security/google-github-auth/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action for authenticating to Google Cloud. Secure drop-in replacement for google-github-actions/auth.

9/10

linaro-its/merge-test-branch

1/10

unfor19/install-aws-cli-action

Install AWS CLI on a GitHub Actions Linux host

5/10

jasonetco/build-and-tag-action

📦🔖 A GitHub Action for publishing JavaScript Actions

2/10

olafurpg/setup-gpg

GitHub Action to install the same version of gpg as on Travis CI

3/10

rudderlabs/rudder-sdk-kotlin/.github/actions/build-check

Kotlin Android SDK and Kotlin JVM for RudderStack - the Customer Data Platform for Developers.

6/10

nvidia-nemo/lens/send-slack-alert/.github/actions/send-slack-alert

8/10

eball/poll-check-endpoint

A GitHub Action that polls a specified endpoint until it becomes available. Also provides check for JSON field in response and check the success or fail status.

2/10

step-security/docker-manifest-create-action

Create a multi-architectures container image in GitHub Actions. Secure drop-in replacement for int128/docker-manifest-create-action.

10/10

Maintained by StepSecurity

microsoft/psscriptanalyzer-action

GitHub Action to run PSScriptAnalyzer to your repository and produce a SARIF file

6/10