Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

grafana/sqlds/actions/commands

A package that assists writing SQL-driven datasources

6/10

ministryofjustice/devsecops-actions/sca/codeql

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

7/10

pytorch/torchtitan/test-infra/.github/actions/setup-ssh

A PyTorch native platform for training generative AI models

4/10

Maintained action available

open-policy-agent/setup-regal

Run Regal, the OPA Rego Linter, as a GitHub Action

3/10

lima-vm/lima-actions/setup

Run non-Ubuntu distributions such as Fedora on GitHub Actions

6/10

eclipse-zenoh/ci/bump-crates

GitHub Actions and workflows used across eclipse-zenoh

3/10

Maintained action available

nikeee/docfx-action

A GitHub action to run DocFX and generate a documentation site.

5/10

Maintained action available

siemens/ix/.github/workflows/actions/storybook

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

6/10

step-security/runs-on-cache/sidebar.tsx

Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.

10/10

annangela/cached_node-modules

A GitHub Action to cache node_modules

5/10

Maintained action available

ministryofjustice/hmpps-github-actions/.github/actions/slack_prepare_results

Github actions for HMPPS projects

6/10

arm-software/cmsis-actions/setup-vcpkg

Custom GitHub actions for MDK / AVH-FVP CI workflows

5/10

step-security/allure-action

Secure drop-in replacement for allure-framework/allure-action.

10/10

Maintained by StepSecurity

actions/attest-build-provenance/fill

Action for generating build provenance attestations for workflow artifacts

6/10

caffeelake/ai-pr-reviewer

AI-based Pull Request Summarizer and Reviewer with Chat Capabilities.

2/10

launchdarkly/go-server-sdk-firestore/.github/actions/public-layout.tsx

Firestore integration for the LaunchDarkly SDK for Server-side Go

4/10

Maintained action available

actions-ecosystem/action-bump-semver

⏫ GitHub Action to bump the semver version up

3/10

balchua/microk8s-actions

Bootstrap MicroK8s with Github Actions

1/10

juliangruber/merge-pull-request-action

A simple GitHub Action for merging pull requests

1/10

sredevopsorg/nhost/.github/actions/install-dependencies

The Open Source Firebase Alternative with GraphQL.

3/10