Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

dawidd6/action-send-mail/_next/static/chunks/43885-1f4e770201f103e3.js

:gear: A GitHub Action to send an email to multiple recipients

5/10

Maintained action available

coveo/ui-kit/.github/actions/e2e-atomic-csp

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10

Maintained action available

ultralytics/actions/retry

Ultralytics GitHub Actions

8/10

issue-ops/parser

Convert issue form responses to JSON

3/10

chainguard-actions/ko-build-setup-ko

4/10

Maintained action available

sonarsource/sonar-ruby/gh-action_release/image

Ruby analyzer

6/10

nvidia-rtx/godot/.github/actions/setup-emsdk

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10

Maintained action available

step-security/action-send-mail/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.

10/10

lhotari/sandboxed-trivy-action

GitHub Action for Trivy, running inside a sandboxed Docker container

4/10

dustin4444/metaplex-program-library/.github/actions/yarn-install-and-verify

Smart contracts maintained by the Metaplex team

2/10

step-integration-tests/auto-pdpr-test-84794-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/bytecodealliance-actions/wasm-tools/fill

GitHub actions to setup wasm-tools and wasmtime. Secure drop-in replacement for bytecodealliance/actions.

8/10

kong/docs-plugin-toolkit/.github/reusable-steps/run-kong-oss

4/10

chaos-mesh/chaos-mesh-action

3/10

step-security/action-staticcheck

🐶 Run staticcheck with reviewdog on pull requests to improve code review experience. Secure drop-in replacement for reviewdog/action-staticcheck.

10/10

Maintained by StepSecurity

ministryofjustice/laa-assess-a-claim-frontend/.github/actions/build_and_push

Frontend application for the LAA Assess a Claim service

6/10

stacklet/superset/.github/actions/chart-testing-action

Apache Superset is a Data Visualization and Data Exploration Platform

5/10

porter-dev/setup-porter

Github Action for installing the Porter CLI

4/10

Maintained action available

sonarsource/sonar-scanner-gradle/.actions/get-build-number

SonarQube Scanner for Gradle

4/10

Maintained action available

knqyf263/trivy-issue-action

GitHub Actions for creating GitHub Issues according to the Trivy scanning result

5/10