Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

ambient-code/ambient-action

GitHub Action that queries Langfuse for agent corrections and creates Ambient Code Platform improvement sessions

3/10

g-rath/check-with-osv-detector

3/10

step-integration-tests/auto-pdpr-test-38233-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

ibnesayeed/setup-ipfs

A GitHub Action to install and initialize IPFS

2/10

vexxhost/chart-vendor/chart-vendor

Tool for vendoring Helm charts into a Git repository

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-48520-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-integration-tests/auto-pdpr-test-33716-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

grafana/shared-workflows/actions/fill

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10

step-integration-tests/auto-pdpr-test-93074-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

sd2k/mcp-tokens-action

GitHub Action for checking and comparing token usage of MCP servers

4/10

anchoret/kroxylicious/.github/actions/common/image

Kroxylicious, the snappy open source proxy for Apache Kafka®

4/10

Maintained action available

jsoref/dependency-review-action

A GitHub Action for detecting vulnerable dependencies in your PRs

3/10

step-security/codacy-coverage-reporter-action/_next/static/chunks/app/layout-e733aa90ddef5a62.js

GitHub Action for the codacy-coverage-reporter. Secure drop-in replacement for codacy/codacy-coverage-reporter-action.

10/10

tj-actions/auto-doc

:octocat: Github action that turns your reusable workflows and custom actions into easy to read markdown tables.

4/10

step-security/test-summary-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Show a helpful summary of test results in GitHub Actions CI/CD workflow runs. Secure drop-in replacement for test-summary/action.

10/10

genzouw/ci-workflows/.github/actions/setup-gitleaks

genzouw 公開リポジトリ共通の reusable CI workflows (統一CIベースライン)

3/10

ministryofjustice/money-to-prisoners-emails/.github/actions/clean-ecr

Application to handle download email attachments and GOV.UK Notify callbacks for Prisoner Money suite of apps

8/10

launchdarkly/go-server-sdk-consul/.github/actions/coverage

Consul integration for the LaunchDarkly SDK for Server-side Go

5/10

Maintained action available

krzema12/github-actions-typing

Bring type-safety to your GitHub actions' API!

5/10

Maintained action available

aigoncharov/github-upload-release-artifacts-action

Upload artifacts to a GitHub release

3/10