Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/sticky-pull-request-comment/__builder_checkout_dir__/.github/actions/secure-download-artifact
Create comment on pull request, if exists update that comment. Secure drop-in replacement for marocchino/sticky-pull-request-comment.
n80fr1n60/secure-checkout
Drop-in replacement for actions/checkout@vX.Y.Z with persist-credentials=false enforced
kong/developer.konghq.com/.github/reusable-steps/run-site
๐ฆ Source code for developer.konghq.com website.
lfreleng-actions/maven-make-build-action
Uses a Makefile to build a Maven project
nodoubtz-record-label/next.js/.github/actions/upload-turboyet-data
The React Framework
smartcontractkit/.github/actions/ctf-cleanup
reusable GHA workflows and actions
slsa-framework/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256
Language-agnostic SLSA provenance generation for Github Actions
adrise/matter-casting/.github/actions/public-layout.tsx
Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.
manticoresoftware/publish_to_repo
Action to publish packages to Manticore repo
release-drafter/release-drafter/docker
Drafts your next release notes as pull requests are merged into master.
aerospike/spring-data-aerospike-starters/.github/actions/stage-release-artifacts
spring-data-aerospike-starters
sakhnovict/add-reviewers-action
GitHub Action to add reviewer(s) to a pull request.
step-security/change-string-case-action/__builder_checkout_dir__/.github/actions/image
Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.
step-integration-tests/auto-pdpr-test-10669-12/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
step-security/slsa-github-generator
Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.
redhat-actions/oc-new-app
Github Action to deploy and expose an application on Openshift
tempoxyz/gh-actions/actions/socket-firewall/sts
Reusable GitHub Actions for Tempo
oasdiff/oasdiff-action/breaking
GitHub Actions that detect breaking changes in your OpenAPI specs and post a review on every pull request
jordanconway/package-manager-hardening
A non-exhaustive list of package manager hardening recommendations to help prevent supply chain vulnerability attacks. Includes AGENTS.md files, skills and Github Action to audit and enforce these recommendations.
garygrossgarten/github-action-scp
โฌ๏ธ Copy a folder to a remote server using SSH