Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

gradle-update/update-gradle-wrapper-action

Keep Gradle Wrapper up-to-date with this action.

4/10

step-security/setup-android/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Android SDK setup for GitHub Actions. Secure drop-in replacement for android-actions/setup-android.

10/10

ytanikin/PRConventionalCommits

2/10

actions-ecosystem/action-add-labels

🏷️ GitHub Action to add labels

3/10

step-security/action-read-yaml/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Custom github action used to read yaml files, supporting multiple keys and variable replacements. Secure drop-in replacement for pietrobolcato/action-read-yaml.

10/10

docker-library/bashbrew

Canonical parsing tool for the official images library files

3/10

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/wp-json/wp/v2/pages/19/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

chronograph-pe/stale

Marks issues and pull requests that have not had recent interaction

2/10

NVIDIA/cccl/.github/actions/workflow-build

CUDA Core Compute Libraries

7/10

xom9ikk/split

Github Action for splitting strings into parts by separator with limit

0/10

ministryofjustice/laa-data-access-api/.github/actions/deploy_branch

8/10

kaisugi/action-regex-match

GitHub Action to do regex matching

3/10

pytorch/TensorRT/test-infra/.github/actions/setup-binary-builds

PyTorch/TorchScript/FX compiler for NVIDIA GPUs using TensorRT

3/10

Maintained action available

reviewdog/action-detect-secrets

GitHub Action: Run detect-secrets with reviewdog

6/10

goplus/setup-xgo

Set up your GitHub Actions workflow with a specific version of XGo

3/10

crowdin/github-action

A GitHub action to manage and synchronize localization resources with your Crowdin project

6/10

Kevinjil/jellyfin-plugin-repo-action

A GitHub action which generates a Jellyfin plugin repository manifest file as a GitHub action.

2/10

step-security/terraform-cloud-provider-publish

An action for publishing terraform providers to a private registry. Secure drop-in replacement for thechrisjohnson/terraform-cloud-provider-publish.

10/10

Maintained by StepSecurity

gaphor/gaphor

Gaphor is the simple modeling tool

6/10

christian-draeger/read-properties

Github action to read java properties files

5/10