Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

che-incubator/setup-minikube-action

Setup minikube to install/start Eclipse Che using as most as possible available memory/cpu

3/10

peterrhodesdev/build-a-badge

GitHub Action to create dynamic and customizable README badges using shields.io/endpoint

3/10

Jimver/cuda-toolkit

GitHub Action to install CUDA

5/10

Maintained action available

rudderlabs/rudder-transformer/.github/actions/restart-deployment

Open-source, warehouse-first Customer Data Pipeline and Segment-alternative. Collects and routes clickstream data and builds your customer data lake on your data warehouse.

4/10

Maintained action available

nv-gha-runners/setup-bazel-cache

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

4/10

step-security/mise-action

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

10/10

Maintained by StepSecurity

neondatabase/dev-actions/deploy-queue

6/10

withgraphite/graphite-ci-action

1/10

step-security/test-reporter/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for dorny/test-reporter.

10/10

grafana/k6-extension-actions/setup-eget

Reusable composite GitHub actions to support k6 extension development.

6/10

step-security/repository-dispatch/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

A GitHub action to create a repository dispatch event. Secure drop-in replacement for peter-evans/repository-dispatch.

10/10

bazelbuild/setup-bazelisk

Set up your GitHub Actions workflow with a specific version of Bazelisk

5/10

chainguard-dev/actions/setup-registry

A collection of reusable Github Actions workflows.

8/10

secureblue/approvals-action

An action to require approvals from permissionless approvers

4/10

juliangruber/sleep-action

Sleep for a set period of time

1/10

step-security/setup-vals/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

10/10

dawidd6/action-ansible-playbook

:gear: A GitHub Action for running Ansible playbooks

5/10

approved-3rd-party-actions/upload-mobile-app-github-action

The Github action to upload an mobile app file to Kobiton Apps Repo

3/10

aquasecurity/tfsec-pr-commenter-action

Add comments to pull requests where tfsec checks have failed

4/10

armbian/build

Armbian Linux build framework generates custom Debian or Ubuntu image for x86, aarch64, riscv64 & armhf

8/10