Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

depends-on/depends-on-action

GitHub action to use dependent Pull Requests

2/10

jamesives/github-pages-deploy-action

🚀 Automatically deploy your project to GitHub Pages using GitHub Actions. This action can be configured to push your production-ready code into any branch you'd like.

8/10

andife/power_spherical

Pytorch implementation of the Power Spherical distribution

3/10

rexebin/next-nuget-package-version

2/10

harden-runner-canary/kyverno/.github/actions/kyverno-logs

Kubernetes Native Policy Management

3/10

ros-tooling/action-ros-ci

Github Action to build and test ROS 2 packages using colcon

5/10

MishaKav/pytest-coverage-comment

Comments a pull request with the pytest code coverage badge and full report

8/10

grafana/mimir/actions/backport

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

8/10

rudderlabs/github-action-check-size-limit

Compare the real cost to run your JS app or lib to keep good performance in every pull request

4/10

fortify/gha-setup-fod-uploader

Deprecated; please use https://github.com/marketplace/actions/fortify-ast-scan instead

3/10

actions-security-demo/poc-1/.github/actions/custom

Proof of concept repo 1

3/10

Maintained action available

unsignedapps/swift-create-xcframework

A simple Command Line Tool to create XCFrameworks by wrapping xcodebuild.

4/10

beaconbrigade/package-json-version

Github action to retrieve the version number in your package.json file for use in other actions

0/10

mskri/check-uncommitted-changes-action

A GitHub action for checking if repository has uncommitted changes.

3/10

step-security/ssh-key-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

10/10

elide-dev/bun/.github/actions/setup-bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

3/10

bpmn-io/actions/release-issue

The github actions used by the bpmn-io team

5/10

Maintained action available

coveo/plasma/.github/actions/storybook

Plasma components implemented with React!

5/10

Maintained action available

step-security/clippy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

🐻‍❄️📦 GitHub action to run Clippy, an up-to-date and modern version of actions-rs/clippy. Secure drop-in replacement for auguwu/clippy-action.

10/10

CIFriends/prp-preprocessor

A GitHub Action that replaces variables in files

3/10