Assess the risk of third-party GitHub Actions

gradio-app/github/actions/comment-pr

github helpers for gradio repos!

0/10

ministryofjustice/hmpps-sre-python-lib/.github/actions/run-pytest

A library of commonly-used Python scripts and libraries for the SRE team (bootstrapped 2025-11-14)

6/10

crazy-max/ghaction-upx

GitHub Action for UPX, the Ultimate Packer for eXecutables

wolfi-dev/actions/wolfictl-update-gh

A collection of reusable Github Actions workflows.

8/10

nvidia/aicr/.github/actions/load-versions

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10

blinqas/tf-plan-pr-comment

grafana/database-plugin-tools/.github/actions/check-labels

Create Grafana plugins with ease.

codecov/codecov-action

GitHub Action that uploads coverage to Codecov :open_umbrella:

9/10

softprops/action-gh-release/_next/static/chunks/14233-9c198ef6720a7bc6.js

📦 :octocat: GitHub Action for creating GitHub Releases

4/10

uraimo/run-on-arch-action

A Github Action that executes jobs/commands on non-x86 cpu architectures (ARMv6, ARMv7, aarch64, s390x, ppc64le, riscv64) via QEMU

rapidsai/devcontainers/.github/actions/build-windows-image

ministryofjustice/payforlegalaid/.github/snyk-scan

7/10

zarf-dev/setup-zarf

GitHub Action for Installing and Configuring Zarf

4/10

nosense588/spring-boot/.github/actions/build

Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.

2/10

crazy-max/ghaction-chocolatey

GitHub Action for Chocolatey, the package manager for Windows

zephyrproject-rtos/action_scancode

pulumi/setup-pulumi

GitHub Action to install the Pulumi CLI

deblockt/cucumber-report-annotations-action

a github action to publish cucumber report on pull request annotations

1/10

andife/openvino/.github/actions/cache/cleanup

OpenVINO™ is an open source toolkit for optimizing and deploying AI inference