Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

mercari/actions-runner-controller/.github/actions/image

Kubernetes controller for GitHub Actions self-hosted runners

4/10

vladopajic/go-test-coverage/action/source

go-test-coverage is a tool designed to report issues when test coverage falls below a specified threshold

5/10

Maintained action available

comunidadaylas/packsquash-action

▶️ Action to run PackSquash in a GitHub Actions workflow.

7/10

snyk/actions/public-layout.tsx

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

step-security/actions-rs-cargo

📦 GitHub Action for Rust `cargo` command. Secure drop-in replacement for actions-rs/cargo.

10/10

Maintained by StepSecurity

electron/secret-service-action

4/10

yonasbsd/tempo/actions/backport

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

3/10

Maintained action available

launchdarkly/openfeature-python-server/.github/actions/public-layout.tsx

An OpenFeature provider for the LaunchDarkly Python server SDK.

6/10

aerospike/aerospike-client-go/.github/actions/public-layout.tsx

Aerospike Client Go

5/10

Maintained action available

step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-node

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10

step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/privacy-check

:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.

9/10

launchdarkly/react-client-sdk/.github/actions/publish-npm

LaunchDarkly Client-side SDK for React.js

5/10

Maintained action available

doyensec/electronegativity-action

The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

2/10

abcxyz/pkg/.github/actions/setup-binary

Common tools and libraries for abcxyz projects.

4/10

sonarsource/release-github-actions/create-jira-version

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

5/10

Maintained action available

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/privacy-check

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

teebra/json-to-html-table

3/10

sonarsource/sonar-scanner-cli/.actions/public-layout.tsx

Scanner CLI for SonarQube (Server, Cloud)

6/10

chainguard-actions/golangci-golangci-lint-action

2/10

step-security/sonarqube-quality-gate-action

Secure drop-in replacement for sonarsource/sonarqube-quality-gate-action.

10/10

Maintained by StepSecurity