Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

theafricanquant/nautilus_trader/.github/actions/cargo-tool-install

Production-grade Rust-native trading engine with deterministic event-driven architecture

6/10

lgtm-hq/runner-network-diagnostics/vendor/network-probe

Bounded GitHub-hosted runner DNS and egress diagnostics with retained provenance for lgtm-ci incident 1203

3/10

elastic/apm-agent-java/.github/workflows/fill

8/10

vimtor/action-zip

🗄️ Action for zipping files easily

4/10

step-security/get-user-teams-membership/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to get a user teams membership in a given organization. Secure drop-in replacement for tspascoal/get-user-teams-membership.

8/10

step-integration-tests/auto-pdpr-test-87792-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-01811-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-83513-8/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

stephanmeijer/goose-review/lanes

LLM pull request review with Goose: your checks, your models, verified by a second model family

3/10

npalm/action-docs-action

Action to update GitHub action documentation

2/10

skymoore/required-approvals

Github Action to check PR approvals and codeowners

3/10

homebrew/actions/find-related-workflow-run-id

🚀 Homebrew's GitHub Actions

7/10

chainguard-actions/actions-ecosystem-action-get-latest-tag

2/10

step-security/action-semantic-pull-request

GitHub Action that ensures that your PR title matches the Conventional Commits spec. Secure drop-in replacement for amannn/action-semantic-pull-request.

10/10

Maintained by StepSecurity

dargon789/openzeppelin-contracts/.github/actions/storage-layout

OpenZeppelin Contracts is a library for secure smart contract development.

5/10

Maintained action available

egibs/melange/melange-src/.github/actions/setup-bubblewrap

build APKs from source code

5/10

Maintained action available

monry/actions-get-project-item-id

Get Project Item Id

2/10

tj-actions/release-tagger

:octocat: Github action to manage action releases.

4/10

codesee-io/rust-toolchain

Concise GitHub Action for installing a Rust toolchain

4/10

xanderhendriks/action-build-stm32cubeide

Github action for building STM32 Cube IDE projects

3/10