Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_codescan_notification

Shared actions for Github workflows to use PUT NO WORKFLOWS IN HERE! (except security scanning ones) (bootstrapped 2026-03-30)

4/10

grafana/community-contributions/.github/actions/setup-enterprise

External contributor PR workflow testing sandbox

2/10

actions-ecosystem/action-release-label

🏷️ GitHub Action to output a semver update level from a pull request release label

3/10

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/get-env-details

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

6/10

approved-3rd-party-actions/r-lib-actions/setup-tinytex

GitHub Actions for the R community

2/10

step-security/proof-html/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to validate HTML, check links, and more ✅. Secure drop-in replacement for anishathalye/proof-html.

10/10

step-security/gha-setup-vsdevenv

GitHub Action to setup the VS dev environment for the job. Secure drop-in replacement for compnerd/gha-setup-vsdevenv.

10/10

Maintained by StepSecurity

pbrisbin/setup-tool-action

Generic action for installation of any tool that offers pre-compiled binaries for download

2/10

browser-actions/setup-geckodriver

Set up your GitHub Actions workflow with a specific version of geckodriver.

2/10

cinotify/github-action

2/10

credfeto/action-sql-format

6/10

actions-security-demo/pytorch/.github/actions/pytest-cache-download

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10

marvinpinto/action-automatic-releases

READONLY: Auto-generated mirror for https://github.com/marvinpinto/actions/tree/master/packages/automatic-releases

5/10

a-kenji/update-rust-toolchain

Automatically update your rust toolchain.

4/10

pytorch/pytorch/.github/actions/binary-docker-build

Tensors and Dynamic neural networks in Python with strong GPU acceleration

5/10

Maintained action available

nick-fields/assert-action

Performs different types of assertions for use in an Action workflow. This is intended to be used to validate outputs and helpful in writing integration tests of Actions.

3/10

grafana/scenes/.github/actions/yarn-nm-install

Build Grafana dashboards directly in your Grafana app plugins.

6/10

hashicorp-forge/go-test-split-action

Github Action to produce a list of go tests to run in parallel action steps using a matrix strategy

5/10

Maintained action available

ory/ci/prettier

Automation and robots for Ory's CI and CD pipelines

4/10

step-security/delete-deployment-environment/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.

9/10