Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

adrise/matter-casting/.github/actions/image

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10

nvidia-nemo/megatron-bridge/.github/actions/test-template

Training library for Megatron-based models with bidirectional Hugging Face conversion capability

7/10

dimitarvdimitrov/shared-workflows/actions/image

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

3/10

step-security/setup-protoc/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to setup the protoc compiler for protocol buffers. Secure drop-in replacement for arduino/setup-protoc.

10/10

step-security/git-tag-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.

9/10

actions-rs/clippy-check

📎 GitHub Action for PR annotations with clippy warnings

0/10

openzeppelin/openzeppelin-ui/.github/actions/fill

OpenZeppelin UI - React components and utilities for blockchain applications

6/10

openzeppelin/relayer-plugin-channels/../__tool_action_dir__

3/10

Maintained action available

shopware/shopware-mcp-evals/.github/actions/setup-lane

Two-layer test suite for the Shopware MCP server: functional checks and LLM-based tool description evals.

5/10

Maintained action available

openzeppelin/relayer-plugin-x402-facilitator/.github/actions/prepare

OpenZeppelin Relayer - x402 Facilitator plugin

3/10

launchdarkly/python-server-sdk-ai/.github/actions/public-layout.tsx

LaunchDarkly Server-side AI SDK for Python

5/10

Maintained action available

step-security/carabiner-dev-actions

GiitHub actions for various tools in the Carabiner ecosystems. Secure drop-in replacement for carabiner-dev/actions.

10/10

guillaumefalourd/assert-command-line-output

Github Action to assert / check a command line output 🕵️⚙️🖥

3/10

tomasreyes/kafka/.github/actions/setup-python

Mirror of Apache Kafka

5/10

Maintained action available

ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/get-env-details

HMPPS Manage People on Probation UI

5/10

Maintained action available

ministryofjustice/laa-dwp-benefit-checker/.github/actions/extract_release_name_from_branch

Benefit Checker service which acts as a proxy to the DWP service

8/10

step-integration-tests/auto-pdpr-test-52503-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

bloopai/apple-code-sign-action

0/10

stakekit/ledger-live/tools/actions/composites/run-coin-tester

Mono-repository for packages related to Ledger Live and its javascript ecosystem.

3/10

timschoenle/actions/actions/test/fill

Composite and Node GitHub Actions, reusable workflows and shared Renovate presets, each released under its own tag.

7/10