Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/ssh-key-action/.github/actions/cache-npm

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

10/10

gradle/gradle-build-action

Execute your Gradle build and trigger dependency submission

7/10

v7labs/ssh-agent-gha

GitHub Action to setup `ssh-agent` with a private key

3/10

equinor/segyio/.github/actions/benchmark

Fast Python library for SEGY files.

6/10

go-semantic-release/action

:octocat: semantic-release GitHub Action

4/10

che-incubator/setup-minikube-action

Setup minikube to install/start Eclipse Che using as most as possible available memory/cpu

3/10

peterrhodesdev/build-a-badge

GitHub Action to create dynamic and customizable README badges using shields.io/endpoint

3/10

Jimver/cuda-toolkit

GitHub Action to install CUDA

5/10

Maintained action available

rudderlabs/rudder-transformer/.github/actions/restart-deployment

Open-source, warehouse-first Customer Data Pipeline and Segment-alternative. Collects and routes clickstream data and builds your customer data lake on your data warehouse.

4/10

Maintained action available

nv-gha-runners/setup-bazel-cache

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

4/10

step-security/mise-action

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

10/10

Maintained by StepSecurity

neondatabase/dev-actions/deploy-queue

6/10

withgraphite/graphite-ci-action

1/10

step-security/test-reporter/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for dorny/test-reporter.

10/10

grafana/k6-extension-actions/setup-eget

Reusable composite GitHub actions to support k6 extension development.

6/10

step-security/repository-dispatch/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

A GitHub action to create a repository dispatch event. Secure drop-in replacement for peter-evans/repository-dispatch.

10/10

bazelbuild/setup-bazelisk

Set up your GitHub Actions workflow with a specific version of Bazelisk

5/10

chainguard-dev/actions/setup-registry

A collection of reusable Github Actions workflows.

8/10

secureblue/approvals-action

An action to require approvals from permissionless approvers

4/10

juliangruber/sleep-action

Sleep for a set period of time

1/10