Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
sonarsource/sonarqube-mcp-server-zed/.github/actions/slack-notify
A SonarQube MCP Server extension for Zed
step-security/semver-data-action
GitHub Action that can validate and parse data from SemVer version numbers. Secure drop-in replacement for peter-murray/semver-data-action.
step-integration-tests/auto-pdpr-test-25038-10/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
step-integration-tests/auto-pdpr-test-20565-2/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
lgtm-hq/lgtm-ci/.github/actions/upload-pypi-oidc
Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions
step-security/release-drafter/null
Drafts your next release notes as pull requests are merged into master. Secure drop-in replacement for release-drafter/release-drafter.
sasobadovinac/occt/.github/actions/clang-format-check
Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.
useblacksmith/build-push-action
GitHub Action to build and push Docker images with Buildx
yonasbsd/rocksdb/.github/actions/windows-build-steps
A library that provides an embeddable, persistent key-value store for fast storage.
adrise/connectedhomeip/.github/actions/checkout-submodules-and-bootstrap
Fork of project-chip/connectedhomeip
lfreleng-actions/path-check-action
Check if a given path exists in the repository, reports type
ministryofjustice/devsecops-actions/sca/fill
A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.
hyperledger-tooling/github-contributors-action
GitHub action to fetch contributors
grafana/agent/actions/image
Vendor-neutral programmable observability pipelines.
goccy/tobari-action/public-layout.tsx
GitHub Actions for Tobari
nvidia/cuequivariance/.github/actions/setup-python-uv
cuEquivariance is a math library that is a collective of low-level primitives and tensor ops to accelerate widely-used models, like DiffDock, MACE, Allegro and NEQUIP, based on equivariant neural networks. Also includes kernels for accelerated structure prediction.
ai-dynamo/dynamo/.github/actions/install-vcluster-cli
A Datacenter Scale Distributed Inference Serving Framework