Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

egor-tensin/vs-shell

GitHub action to set up the Visual Studio shell environment

5/10

coveo/ui-kit/.github/actions/e2e-stencil

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

yonasbsd/rspack/.github/actions/docker/linux-build

A fast Rust-based web bundler.

5/10

Maintained action available

slsa-framework/slsa-github-generator/.github/actions/verify-token

Language-agnostic SLSA provenance generation for Github Actions

5/10

nvidia/numbast/.github/actions/docs-build

Numbast is a tool to build an automated pipeline that converts CUDA APIs into Numba bindings.

7/10

wandalen/wretry.action/post

Retry action for Github CI

3/10

rapidsai/node/.github/actions/build-and-publish-image

GPU-accelerated data science and visualization in node

3/10

snapshift/action-check-typescript

2/10

huntridge-labs/argus/.github/actions/linter-dockerfile

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

3/10

grafana/synthetic-monitoring-agent/.github/actions/go-cache-save

Synthetic Monitoring agent

8/10

eseay/setup-git-credentials

GitHub action to clone private respositories.

3/10

dtolnay/install

Fast `cargo install` action using a GitHub-based binary cache and attestations

3/10

rematocorp/open-pull-request-action

GitHub action for automatically creating a pull request

3/10

winterjung/split

GitHub action to split string

3/10

step-security/yaml-update-action

Update YAML property with dynamic values. Secure drop-in replacement for fjogeleit/yaml-update-action.

10/10

Maintained by StepSecurity

be-hase/gradle-dependency-diff-action

2/10

step-security/hide-comment-action/__builder_checkout_dir__/.github/actions/privacy-check

Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

10/10

step-security/mongodb-github-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Use MongoDB in GitHub Actions. Secure drop-in replacement for supercharge/mongodb-github-action.

10/10

ministryofjustice/laa-crime-equinity-historical-data-frontend/.github/actions/integration-test

Front-end to view and access to historical data from Equiniti

4/10

step-security/action-junit-report

Reports junit test results as GitHub Pull Request Check. Secure drop-in replacement for mikepenz/action-junit-report.

10/10

Maintained by StepSecurity