Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

yumemi-inc/changed-files

A GitHub Action that outputs a list of changed files in pull requests and commits.

4/10

momentohq/standards-and-practices/github-actions/error-email-action

Information about how we organize, maintain, and release open source software at Momento

3/10

step-security/ssh-key-action/.github/actions/cache-npm

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

9/10

gradle/gradle-build-action

Execute your Gradle build and trigger dependency submission

7/10

v7labs/ssh-agent-gha

GitHub Action to setup `ssh-agent` with a private key

3/10

equinor/segyio/.github/actions/benchmark

Fast Python library for SEGY files.

5/10

Maintained action available

canonical/action-build

A Github action for building Snapcraft projects

2/10

go-semantic-release/action

:octocat: semantic-release GitHub Action

4/10

che-incubator/setup-minikube-action

Setup minikube to install/start Eclipse Che using as most as possible available memory/cpu

3/10

peterrhodesdev/build-a-badge

GitHub Action to create dynamic and customizable README badges using shields.io/endpoint

3/10

Jimver/cuda-toolkit

GitHub Action to install CUDA

5/10

Maintained action available

rudderlabs/rudder-transformer/.github/actions/restart-deployment

Open-source, warehouse-first Customer Data Pipeline and Segment-alternative. Collects and routes clickstream data and builds your customer data lake on your data warehouse.

4/10

Maintained action available

nv-gha-runners/setup-bazel-cache

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

4/10

step-security/mise-action

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

10/10

Maintained by StepSecurity

neondatabase/dev-actions/deploy-queue

6/10

withgraphite/graphite-ci-action

1/10

Maintained action available

step-security/test-reporter/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for dorny/test-reporter.

10/10

grafana/k6-extension-actions/setup-eget

Reusable composite GitHub actions to support k6 extension development.

4/10

step-security/repository-dispatch/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

A GitHub action to create a repository dispatch event. Secure drop-in replacement for peter-evans/repository-dispatch.

10/10

bazelbuild/setup-bazelisk

Set up your GitHub Actions workflow with a specific version of Bazelisk

5/10