Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

openzeppelin/openzeppelin-contracts-upgradeable/.github/actions/fill

Upgradeable variant of OpenZeppelin Contracts, meant for use in upgradeable contracts.

6/10

marko-k0/ic/.github/actions/public-layout.tsx

Internet Computer blockchain source: the client/replica software run by nodes

2/10

mmastrac/mmm-matrix

Matrix Maker GitHub Action

2/10

yonasbsd/vector/.github/actions/pull-test-runner

A high-performance observability data pipeline.

5/10

Maintained action available

freenet-actions/setup-yq

This action sets up YAML parser.

5/10

Maintained action available

anishathalye/proof-html

A GitHub Action to validate HTML, check links, and more ✅

4/10

kong/slsa-generator/../__tool_action_dir__

Language-agnostic SLSA provenance generation for Github Actions

3/10

open-edge-platform/geti-ci/actions/cleanup-runner

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

korandoru/setup-zig

Set up your GitHub Actions workflow with a specific version of Zig (https://ziglang.org/).

2/10

armory-io/plugin-metadata-updater

GitHub action for updating plugin metadata repositories

3/10

coveo/semantic-monorepo-tools/.github/actions/lint

A library of helper functions to do SemVer2 compliant releases from Conventional Commits in monorepos

5/10

Maintained action available

snyk/actions/maven-3-jdk-24

A set of GitHub actions for checking your projects for vulnerabilities.

4/10

upbound/xpkg-action

A @github action for building @crossplane packages

3/10

rustcrypto/actions/cargo-hack-install

GitHub Actions configs: composite actions and shared workflow configuration

3/10

Maintained action available

rajbos-actions/github-upload-action

Upload files to GitHub repository

1/10

chainguard-actions/github-codeql-action/analyze

4/10

Maintained action available

step-security/deployment-status/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action to create a deployment status update. Secure drop-in replacement for chrnorm/deployment-status.

9/10

andife/openvino/.github/actions/handle_docker

OpenVINO™ is an open source toolkit for optimizing and deploying AI inference

3/10

japgolly/setup-scalajs

GitHub Action to prepare the environment for Scala.JS dev and testing

0/10

get-woke/woke-action-reviewdog

woke GitHub Action using reviewdog

3/10