Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

grafana/kost/.github/actions/setup-goversion

K8s Cost Calculator that provides estimated reports for workloads running in Kubernetes.

6/10

kong/docs-plugin-toolkit/.github/reusable-steps/run-kong-ee

4/10

nvidia/onnxruntime/.github/actions/linux-web-init-and-check

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10

ozi-project/release

OZI action - build signed wheel and source releases

7/10

stakekit/safe-wallet-web/.github/workflows/build

Safe{Wallet} – smart contract wallet for Ethereum (ex-Gnosis Safe multisig)

3/10

saionaro/extract-package-version

GitHub Action that reads a package.json file and exposes its version field as a workflow output.

6/10

aerospike/aerospike-client-java-reactive/.github/actions/stage-release-artifacts

Reactive programming interfaces for the Aerospike Java client

7/10

step-security/action-shellcheck

GitHub action for ShellCheck. Secure drop-in replacement for ludeeus/action-shellcheck.

10/10

Maintained by StepSecurity

huntridge-labs/argus/.github/actions/linter-terraform

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10

Maintained action available

bokuweb/reg-actions

A visual regression test tool for github actions :octocat:.

1/10

Maintained action available

ssciwr/doxygen-install

GitHub Action to install Doxygen

5/10

caffeelake/synthetic-monitoring-agent/.github/actions/go-cache-save

Synthetic Monitoring agent

3/10

flowwer-dev/pull-request-stats

Github action to print relevant stats about Pull Request reviewers

2/10

cilium/cilium-cli

CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

8/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/privacy/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

alexstormwood/commitswithintime

A helper action that returns true if commits are detected on a repository within a supplied timeframe.

2/10

approved-3rd-party-actions/go-coverage-report

A CLI tool and GitHub Action to post Go code coverage reports as comment to your pull requests.

3/10

homebrew/actions/pre-build

🚀 Homebrew's GitHub Actions

7/10

step-security/linkinator-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action that checks your README and other markdown for 404s. Secure drop-in replacement for JustinBeckwith/linkinator-action.

10/10

thollander/actions-comment-pull-request

GitHub action to comment pull request

5/10