Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/publish-unit-test-result-action/windows/bash
GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.
step-security/sonarqube-scan-action/fill
Secure drop-in replacement for sonarsource/sonarqube-scan-action.
nvidia/openshell-research/tooling/.github/actions/image
🧪 OpenShell's Research Journal
yonasbsd/neon/.github/actions/upload
Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.
mitchellh/vouch/action/fill
A community trust management system based on explicit vouches to participate.
mercari/actions-runner-controller/.github/actions/image
Kubernetes controller for GitHub Actions self-hosted runners
vladopajic/go-test-coverage/action/source
go-test-coverage is a tool designed to report issues when test coverage falls below a specified threshold
comunidadaylas/packsquash-action
▶️ Action to run PackSquash in a GitHub Actions workflow.
snyk/actions/public-layout.tsx
A set of GitHub actions for checking your projects for vulnerabilities.
step-security/actions-rs-cargo
📦 GitHub Action for Rust `cargo` command. Secure drop-in replacement for actions-rs/cargo.
electron/secret-service-action
yonasbsd/tempo/actions/backport
Grafana Tempo is a high volume, minimal dependency distributed tracing backend.
launchdarkly/openfeature-python-server/.github/actions/public-layout.tsx
An OpenFeature provider for the LaunchDarkly Python server SDK.
aerospike/aerospike-client-go/.github/actions/public-layout.tsx
Aerospike Client Go
step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-node
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.
step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/privacy-check
:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.
launchdarkly/react-client-sdk/.github/actions/publish-npm
LaunchDarkly Client-side SDK for React.js
doyensec/electronegativity-action
The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.
abcxyz/pkg/.github/actions/setup-binary
Common tools and libraries for abcxyz projects.
sonarsource/release-github-actions/create-jira-version
A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.