Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

anchore/sbom-action/publish-sbom

GitHub Action for creating software bill of materials using Syft.

6/10

diddlesnaps/snapcraft-review-action

GitHub Action to review your built Snap package using the same tools as the Snap Store

2/10

step-integration-tests/auto-pdpr-test-47786-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

rmuir/uv-dependency-submission

GitHub Action for submitting uv.lock dependencies

6/10

jahid11978/openclaw/.ci-harness/.github/actions/public-layout.tsx

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

4/10

Maintained action available

equinor/fusion-project-portal/.github/actions/get-fusion-token'

Project Portal powered By Fusion

0/10

4cloudguru/shared-workflows/.github/actions/publish-marketplace

Reusable GitHub Actions workflows shared across the Terraform suite and pipeline-task families. Public so repos in both sethbacon/ and 4cloudguru/ can call them.

3/10

grafana/writers-toolkit/build-website

Technical documentation guidelines for Grafana Labs documentation

7/10

step-security/wei-git-sync/__builder_checkout_dir__/.github/actions/privacy-check

🔃 A GitHub Action for syncing between two independent repositories using force push. Secure drop-in replacement for wei/git-sync.

10/10

ilai-deutel/kibi/__builder_checkout_dir__/.github/actions/privacy-check

A text editor in ≤1024 lines of code, written in Rust

7/10

step-integration-tests/auto-pdpr-test-57274-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/setup-just/__builder_checkout_dir__/.github/actions/privacy-check

🤖 GitHub Action to install the just command runner. Secure drop-in replacement for extractions/setup-just.

10/10

step-integration-tests/auto-pdpr-test-81607-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sonarsource/release-github-actions/get-jira-version

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

5/10

Maintained action available