Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/add-pr-comment

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10

Maintained by StepSecurity

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/anchore-sbom-action

forked from https://github.com/anchore/sbom-action

1/10

Maintained action available

php-actions/phpunit

Run PHPUnit tests in Github Actions.

3/10

slsa-framework/slsa-github-generator/.github/actions/checkout-go

Language-agnostic SLSA provenance generation for Github Actions

4/10

kong/public-shared-actions/security-actions/sca

Shared actions available to both public and private repositories

5/10

vendic/clickup-get-tasks

Clickup get tasks action

0/10

rapidsai/velox-testing/velox-testing/.github/actions/image

7/10

damacus/charts/.github/actions/public-layout.tsx

Helm Charts

3/10

step-integration-tests/auto-pdpr-test-20565-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

nvidia/ising-decoding/.github/actions/fetch-models

A set of training recipes for AI Quantum Error Correction Decoders

5/10

Maintained action available

chronograph-pe/download-artifact

2/10

chainguard-actions/cycjimmy-semantic-release-action

2/10

step-security/install-aws-cli-action/__builder_checkout_dir__/.github/actions/fill

Install AWS CLI on a GitHub Actions Linux host. Secure drop-in replacement for unfor19/install-aws-cli-action.

10/10

chronograph-pe/cache

Cache dependencies and build outputs in GitHub Actions

2/10

step-security/create-pull-request/_next/static/chunks/app/layout-c55d3d7ce0fd94f2.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

step-integration-tests/auto-pdpr-test-48686-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

approved-3rd-party-actions/setup-helm

Github Action for installing Helm

4/10

step-security/retry/_next/static/chunks/app/(public)/action-advisor/%5b...action%5d/page-2ac8df85f3346b02.js

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

10/10

jahid11978/neon/.github/actions/neon-project-create

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

2/10

project-dalec/dalec/.github/actions/setup-source-policy

📦 Produce secure packages and containers with declarative configurations

6/10