Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

snyk/actions/python-3.10

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

proffan/repository-dispatch

A GitHub action to create a repository dispatch event

2/10

nasa/cfs/actions/start-cfs-container

The Core Flight System (cFS)

8/10

sonarsource/ci-github-actions/config-uv

CI/CD GitHub Actions

6/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/content/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

tushar-stepsecurity/icd-test-hugerepo

Fixture with ~2000 branches: the old walk cannot finish, the fast path answers in one call

2/10

step-security/create-pull-request/_next/static/chunks/39315-1039c8f011b371e5.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

kong/slsa-github-generator/.github/actions/compute-sha256

Language-agnostic SLSA provenance generation for Github Actions

3/10

legoktm/gh-action-auto-dch

3/10

product-os/setup-awscli-action

This action installs [AWS CLI version 2](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-welcome.html) in your GitHub Actions workflow.

4/10

Maintained action available

jessehouwing/actions-semver-checker

This action checks the version tags in your repository to ensure correct semantic versioning behavior.

7/10

yonasbsd/rspack/.github/actions/image

A fast Rust-based web bundler.

5/10

Maintained action available

yonasbsd/redpanda/ghca/actions/buildkite-slash-commands

Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!

3/10

Maintained action available

espressif/github-actions/sync_issues_to_jira

Github Actions developed/used by Espressif

0/10

trunk-io/trunk-action/.trunk/image

Trunk.io GitHub Action

7/10

step-security/run-windows-docker-container-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Action to run windows containers. Secure drop-in replacement for philips-software/run-windows-docker-container-action.

10/10

chainguard-actions/benc-uk-workflow-dispatch

2/10

step-integration-tests/auto-pdpr-test-01868-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

repolevedavaj/install-nsis

5/10

Maintained action available

eseay/cancel-workflow-action

⏹️GitHub Action to cancel previous running workflows on push

0/10