Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

jonathancombs782/gitgot/.github/actions/slack-alert

The open-source repo for docs.github.com

0/10

step-security/detection-sync-action

This is a Github action that will sync a given folder of detections to your RunReveal workspace. Secure drop-in replacement for runreveal/detection-sync-action.

10/10

Maintained by StepSecurity

open-edge-platform/geti-ci/actions/sign-image

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

clowdhaus/terraform-composite-actions

Contains composit GitHub actions for use with Terraform AWS Module workflows

4/10

sonarsource/sonar-scanner-jenkins/.actions/get-build-number

SonarQube Scanner for Jenkins

5/10

patrickedqvist/wait-for-vercel-preview

A github action for waiting for the vercel preview

4/10

Maintained action available

paddlehq/go-aws-ssm/.github/actions/public-layout.tsx

Wraps the aws-sdk-go and hides the complexity of dealing with the not so Go friendly AWS SDK.

4/10

skills/exercise-toolkit/actions/file-exists

Toolkit to standardize and reuse common parts of Skills exercises

5/10

italia/publiccode-parser-action

A simple Github action to validate publiccode.yml

3/10

step-integration-tests/auto-pdpr-test-07769-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sonarsource/gh-action_dogfood_merge

6/10

step-security/softprops-turnstyle/__builder_checkout_dir__/.github/actions/image

🎟️A GitHub Action for serializing workflow runs. Secure drop-in replacement for softprops/turnstyle.

10/10

grafana/shared-workflows/_shared-workflows-publish-techdocs/actions/techdocs-rewrite-relative-links

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

equinor/xtgeo/.github/actions/setup_xtgeo

XTGeo Python class library for subsurface Surfaces, Cubes, Wells, Grids, Points, etc

7/10

oxsecurity/megalinter/flavors/internal/backend/remote-state/consul

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10