Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

angular/dev-infra/github-actions/post-approval-changes

Angular Development Infrastructure

6/10

NVIDIA/JAX-Toolbox/.github/actions/build-container

JAX-Toolbox

6/10

immich-app/devtools/actions/pre-job

Various tooling used by the Immich maintainer team

6/10

google-github-actions/get-gke-credentials

A GitHub Action that configure authentication to a GKE cluster.

7/10

Kong/public-shared-actions/security-actions/scan-rust

Shared actions available to both public and private repositories

6/10

step-security/github-action-renovate-config-validator/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub Actions for renovate-config-validator. Secure drop-in replacement for suzuki-shunsuke/github-action-renovate-config-validator.

10/10

yonasBSD/oxc/.github/actions/clone-submodules

⚓ A collection of JavaScript tools written in Rust.

5/10

Maintained action available

aws-actions/configure-aws-credentials

Configure AWS credential environment variables for use in other GitHub Actions.

10/10

sersoft-gmbh/xcodebuild-action

A GitHub action that runs xcodebuild

6/10

yonasBSD/teleport/.github/actions/prepare-workspace

The easiest, most secure way to access infrastructure.

4/10

Maintained action available

JoftheV/docs/.github/actions/cache-nextjs

The open-source repo for docs.github.com

0/10

ruby/setup-ruby

An action to download a prebuilt Ruby and add it to the PATH in 5 seconds

7/10

yonasBSD/session-desktop/actions/upload_prod_artefacts

Session Desktop - A Decentralized, Onion Routed, Private Messenger

1/10

yonasBSD/rocksdb/.github/actions/pre-steps

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

Maintained action available

anz-bank/vscode-sysl/.github/action/github-tag-action

VS Code extension for SYSL Language

2/10

joschi/setup-jdk

(DEPRECATED) Set up your GitHub Actions workflow with a specific version of AdoptOpenJDK

2/10

step-security/secrets-sync-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

A Github Action that can sync secrets from one repository to many others. Secure drop-in replacement for jpoehnelt/secrets-sync-action.

10/10

hashicorp/terraform-github-actions/init

Terraform GitHub Actions

4/10

prisma-cloud-shiftleft/iac-scan-action

Prisma Cloud IaC Scan GitHub Action

2/10

benjlevesque/short-sha

Github Action to shorten the git SHA1 and make it accessible in outputs

5/10