Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia/pytorch-windows-ci/oot/.github/actions/stop-runner-diagnostics

Out of tree repo to run pytorch CI tests on Nvidia GPUs for Windows

5/10

Maintained action available

step-security/setup-buildx-action/_next/static/chunks/86444-63fbcea17e6349ed.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10

step-integration-tests/auto-pdpr-test-93245-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

crazy-max/ghaction-setup-docker

GitHub Action to set up (download and install) Docker CE

6/10

swift-institute/.github/.github/actions/image

Organization-level community-health defaults for Swift Institute.

5/10

Maintained action available

databricks/cli

Databricks CLI

5/10

Maintained action available

step-integration-tests/auto-pdpr-test-57362-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

snyk/actions/gradle-jdk12

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

lisanna-dettwyler/action-post-run

Enables executing custom commands once a workflow job has ended.

2/10

yonasbsd/juicefs/.github/actions/build

JuiceFS is a distributed POSIX file system built on top of Redis and S3.

3/10

Maintained action available

dekinderfiets/pr-name-enforcer

2/10

timschoenle/portfolio/.github/actions/restore-build

Dioxus fullstack (SSR + hydration) portfolio served by Axum.

4/10

Maintained action available

elastic/elastic-otel-java/.github/workflows/validate-tag

8/10

step-security/metadata-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker. Secure drop-in replacement for docker/metadata-action.

10/10

aszc/change-string-case-action

Github Action: Make a string lowercase, uppercase, or capitalized

5/10

mitre/saf_action

GitHub Action for SAF CLI

4/10

openzeppelin/compact-contracts/.github/actions/setup

OpenZeppelin Contracts written in Compact for Midnight

6/10

step-security/super-linter/internal/backend/remote-state/pg

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10

step-security/retry/_next/static/chunks/94575-078f183a85af1a65.js

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

10/10

anysphere/buildkit-cache-dance

Save `RUN --mount=type=cache` caches on GitHub Actions ( Forked from https://github.com/overmindtech/buildkit-cache-dance )

2/10