Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

nvidia-rtx/godot/.github/actions/pre-commit

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10

Maintained action available

servicenow/sncicd-apply-changes

3/10

aurornz/paths-filter

Conditionally run actions based on files modified by PR, feature branch or pushed commits

6/10

step-security/yaml-schema-checker

A Github action for validating .yaml files using JSON schemas. Secure drop-in replacement for thiagodnf/yaml-schema-checker.

8/10

Maintained by StepSecurity

bus1/cabuild/action/msdevshell

Content-Addressable Build Environments

2/10

cloudzero/cloudzero-action-publish-costformation

This is a GitHub action to publish CostFormation definitions to the CloudZero platform.

5/10

wyrihaximus/github-action-wait-for-status

Github Action that waits for successful commit status

2/10

oxsecurity/megalinter/flavors/cupcake

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

6/10

yonasbsd/authentik/.github/actions/public-layout.tsx

The authentication glue you need.

4/10

Maintained action available

launchdarkly/swift-launchdarkly-observability/.github/actions/test-swiftpm

LaunchDarkly Observability SDK for Swift

6/10

yonasbsd/buck2/.github/actions/contributing.md

Build system, successor to Buck

3/10

Maintained action available

soos-io/soos-dast-github-action

SOOS DAST GitHub Action - Register for a Free Trial at https://app.soos.io/register

4/10

snnaplab/get-labels-action

4/10

optum/sourcehawk/.github/actions/build-windows-native-image

Sourcehawk is an extensible compliance as code tool which allows development teams to run compliance scans on their source code.

4/10

sonarsource/parent-oss/.actions/get-build-number

Parent file of public Maven projects

7/10

singularityhub/install-singularity

Action to install Singlarity optimized for simplicity.

3/10

step-security/test-reporter/__builder_checkout_dir__/.github/actions/action-info.client.tsx

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for dorny/test-reporter.

8/10

turtlesec-no/get-ninja

3/10

step-security/filter-sarif

GitHub Action for filtering Code Scanning alerts by path and id. Secure drop-in replacement for advanced-security/filter-sarif.

10/10

Maintained by StepSecurity

wistia/parse-tool-versions

Github action created to parse .tool-versions into the environment

5/10