Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
actions-ecosystem/action-release-label
๐ท๏ธ GitHub Action to output a semver update level from a pull request release label
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/get-env-details
A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)
approved-3rd-party-actions/r-lib-actions/setup-tinytex
GitHub Actions for the R community
step-security/proof-html/__builder_checkout_dir__/.github/actions/privacy-check
A GitHub Action to validate HTML, check links, and more โ . Secure drop-in replacement for anishathalye/proof-html.
step-security/gha-setup-vsdevenv
GitHub Action to setup the VS dev environment for the job. Secure drop-in replacement for compnerd/gha-setup-vsdevenv.
pbrisbin/setup-tool-action
Generic action for installation of any tool that offers pre-compiled binaries for download
browser-actions/setup-geckodriver
Set up your GitHub Actions workflow with a specific version of geckodriver.
cinotify/github-action
credfeto/action-sql-format
actions-security-demo/pytorch/.github/actions/pytest-cache-download
Tensors and Dynamic neural networks in Python with strong GPU acceleration
marvinpinto/action-automatic-releases
READONLY: Auto-generated mirror for https://github.com/marvinpinto/actions/tree/master/packages/automatic-releases
a-kenji/update-rust-toolchain
Automatically update your rust toolchain.
pytorch/pytorch/.github/actions/binary-docker-build
Tensors and Dynamic neural networks in Python with strong GPU acceleration
nick-fields/assert-action
Performs different types of assertions for use in an Action workflow. This is intended to be used to validate outputs and helpful in writing integration tests of Actions.
grafana/scenes/.github/actions/yarn-nm-install
Build Grafana dashboards directly in your Grafana app plugins.
hashicorp-forge/go-test-split-action
Github Action to produce a list of go tests to run in parallel action steps using a matrix strategy
ory/ci/prettier
Automation and robots for Ory's CI and CD pipelines
step-security/delete-deployment-environment/__builder_checkout_dir__/.github/actions/privacy-check
GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.
anthropics/claude-code-action
nosense588/spring-boot/.github/actions/publish-to-sdkman
Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.