Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

nginx/ci-self-hosted/.github/actions/get-from-vault

dsx-ai-factory/nvkr/.github/nvkr-dev/actions/shared/upload-carrier

NVIDIA Kubernetes Recipes (NVKR). Build system and published Definitions for NVKE node OS images, packages and components.

6/10

yonasbsd/wazuh/.github/actions/5_builderpackage_windows-smoke-upgrade-test

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

2/10

tempoxyz/earn/.github/actions/setup

Vault-backed stablecoin yield, built for Tempo.

6/10

gr2m/get-json-paths-action

A GitHub Action to access deep values of JSON strings

0/10

azure/bicep-build-action

GitHub Action for building an ARM Template from Bicep

0/10

step-security/nats-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

start nats server(s) for Github Actions. Secure drop-in replacement for onichandame/nats-action.

10/10

statsig-io/statsig-publish-sdk-action

1/10

oxsecurity/megalinter/flavors/internal/legacy

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10

scribd/find-slack-user-action

GitHub Action that retrieves a Slack username for the author of the most recent commit (or provided email).

5/10

pytorch/fbgemm/test-infra/.github/actions/setup-binary-builds

FB (Facebook) + GEMM (General Matrix-Matrix Multiplication) - https://code.fb.com/ml-applications/fbgemm/

2/10

Maintained action available

grafana/redshift-datasource/actions/public-layout.tsx

Grafana data source plugin for querying AWS Redshift

7/10

cisagov/setup-go-package

Composite GitHub action to install a Go package.

6/10

orhun/cargo-semver-checks-action

A GitHub Action for running cargo-semver-checks

2/10

approved-3rd-party-actions/branch-protection

0/10

step-integration-tests/auto-pdpr-test-01948-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

jahid11978/openclaw-local-test/.github/actions/ensure-base-commit

Test branch for OpenClaw PR's

4/10

Maintained action available

yonasbsd/wazuh/.github/actions/build_target_cpp

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

2/10

quad4-software/ren-browser/.github/actions/setup-android

Modern Browser for the Reticulum Network using Reticulum-Go

7/10

launchdarkly/ld-relay/.github/actions/publish

LaunchDarkly Relay Proxy

4/10

Maintained action available