Assess the risk of third-party GitHub Actions

Homebrew/actions/setup-homebrew

🚀 Homebrew's GitHub Actions

9/10

devops-infra/action-commit-push

GitHub Action that will create a new commit and push it to the repository

8/10

JasonEtco/build-and-tag-action

📦🔖 A GitHub Action for publishing JavaScript Actions

2/10

grafana/Kost/.github/actions/setup-goversion

K8s Cost Calculator that provides estimated reports for workloads running in Kubernetes.

sett-and-hive/sarif-to-comment-action

A GitHub action for @security-alert/sarif-to-comment

grafana/shared-workflows/actions/setup-jrsonnet

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

jmertic/lfx-tac-actions

GH action for syncing data into a TAC repo

DoozyX/clang-format-lint-action

This action checks if the source code matches the .clang-format file.

emmyoop/changie_bot

2/10

Git-Hub-Chris/FreeCAD/.github/workflows/actions/linux/configure

Open source 3D modeler.

hashicorp/action-setup-enos

A Github Action to install, configure, and run Enos scenarios

grafana/grafana/.github/actions/setup-node

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

chains-project/maven-lockfile

Lockfiles for Maven. Pin your dependencies. Build with integrity.

Maintained action available

git-for-windows/get-azure-pipelines-artifact

A GitHub Action that downloads and caches the specified artifact from a given Azure Pipeline

Maintained action available

supabase/setup-cli

A GitHub action for interacting with your Supabase projects using the CLI.