Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

slsa-framework/slsa-github-generator/.github/actions/verify-token

Language-agnostic SLSA provenance generation for Github Actions

4/10

nvidia/numbast/.github/actions/docs-build

Numbast is a tool to build an automated pipeline that converts CUDA APIs into Numba bindings.

7/10

wandalen/wretry.action/post

Retry action for Github CI

3/10

rapidsai/node/.github/actions/build-and-publish-image

GPU-accelerated data science and visualization in node

5/10

Maintained action available

snapshift/action-check-typescript

2/10

timheuer/vsix-version-stamp

4/10

huntridge-labs/argus/.github/actions/linter-dockerfile

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

grafana/synthetic-monitoring-agent/.github/actions/go-cache-save

Synthetic Monitoring agent

8/10

eseay/setup-git-credentials

GitHub action to clone private respositories.

3/10

dtolnay/install

Fast `cargo install` action using a GitHub-based binary cache and attestations

3/10

rematocorp/open-pull-request-action

GitHub action for automatically creating a pull request

3/10

winterjung/split

GitHub action to split string

3/10

sonarsource/sonarlint-omnisharp/gh-action_release/main

7/10

step-security/yaml-update-action

Update YAML property with dynamic values. Secure drop-in replacement for fjogeleit/yaml-update-action.

10/10

Maintained by StepSecurity

be-hase/gradle-dependency-diff-action

2/10

nvidia-omniverse/isaaclab/.github/actions/ecr-build-push-pull

Unified framework for robot learning built on NVIDIA Isaac Sim

3/10

eergashov/allure-report-action

Allure Report action with history

3/10

step-security/hide-comment-action/__builder_checkout_dir__/.github/actions/privacy-check

Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

9/10

optum/react-hooks/.github/actions/public-layout.tsx

3/10

step-security/mongodb-github-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Use MongoDB in GitHub Actions. Secure drop-in replacement for supercharge/mongodb-github-action.

10/10