Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
step-security/setup-bun/.github/actions/compare-bun-version
Set up your GitHub Actions workflow with a specific version of Bun. Secure drop-in replacement for oven-sh/setup-bun.
dustin4444/oss-directory/main/.github/workflows/setup-external-pr-tools
A curated directory of open source software (OSS) projects and their associated artifacts
yonasbsd/wazuh/.github/actions/4_operational_prerelease_unit_tests_issue
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
orcasecurity/shiftleft-fs-action
Orca Security - SCA / Secret detection GitHub Action
sfackler/actions/fill
elastic/oblt-actions/pre-commit
darenm/setup-vstest
DEPRECATED - Set up your GitHub Actions workflow to add VSTest.console.exe into the PATH
google-github-actions/send-google-chat-webhook
A GitHub Action for sending a message to Google Chat via a webhook.
lost-pixel/lost-pixel
Open source alternative to Percy, Chromatic, Applitools.
step-security/dtolnay-rust-toolchain/__builder_checkout_dir__/.github/actions/privacy-check
Concise GitHub Action for installing a Rust toolchain. Secure drop-in replacement for dtolnay/rust-toolchain.
ferretdb/github-actions/linters
Shared GitHub Actions for FerretDB repos
politicalsphere/ci/.github/actions/ps-task/trufflehog
CI/CD pipelines and GitHub Actions for Political Sphere
unionai/flytectl-setup-action
Install and setup flytectl for use in other actions
little-core-labs/install-terraform
Install terraform to the current GitHub Actions job
tannergolden/standards/actions/prune-workflow-runs
Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, scanning, releases, and a shared label taxonomy.
openapi-generators/openapitools-generator-action
Generate a client library using the OpenAPITools Generator
pre-commit/action
a GitHub action to run `pre-commit`
tanker187/playwright/.github/actions/enable-microphone-access
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/viasat-fetch-ghdotcom-token-action
Viasat-specific GitHub Action that uses GitHub OIDC + Vault to mint a short-lived (ephemeral) authenticated github.com token for use in GHES workflows (e.g., to avoid unauthenticated API rate limits).
clementtsang/cargo-action
A simple GitHub Action to invoke cargo/cross.