Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

kolide/expo-fork/.github/actions/expo-caches

Our fork of expo

3/10

step-security/create-pull-request/_next/static/chunks/15877-68163daa9580388a.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10

tbowman01/prompt-card-system/.github/actions/statusline

A comprehensive prompt testing and evaluation system with advanced analytics, AI-powered optimization, and real-time performance monitoring.

5/10

step-security/docker-build-push-action/_next/static/chunks/35730-370223276a9dc111.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

10/10

step-integration-tests/auto-pdpr-test-24555-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

step-security/graphql-inspector

🕵️‍♀️ Validate schema, get schema change notifications, validate operations, find breaking changes, look for similar types, schema coverage. Secure drop-in replacement for graphql-hive/graphql-inspector.

10/10

Maintained by StepSecurity

step-security/retry/_next/static/chunks/40300-e26a046d4034a815.js

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

10/10

step-security/rust-cache/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action that implements smart caching for rust/cargo projects. Secure drop-in replacement for Swatinem/rust-cache.

8/10

redhat-actions/oc-login

GitHub Action to log in to an OpenShift cluster and set up a Kubernetes context.

8/10

tamasfe/auto-tag

3/10

babenek/credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as personal information, token, passwords, api keys and etc) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type of the credential as a result.

5/10

Maintained action available

ministryofjustice/money-to-prisoners-start-page/.github/actions/clean-ecr

GOV.UK start page for Money to Prisoners

7/10

camunda/infra-global-github-actions/fossa/setup

Small Github Actions maintained by Infra team and used by other teams inside Camunda

6/10

ministryofjustice/money-to-prisoners-transaction-uploader/.github/actions/clean-ecr

Reads Money to Prisoners (MTP) bank account to facilitate reconciliation

8/10

jahid11978/clawsweeper/clawsweeper/.github/actions/public-layout.tsx

ClawSweeper scans all issues and PRs and suggest what we can close, and why. It runs every PR / Issue once a week.

5/10

Maintained action available

mfinelli/setup-imagemagick

github action to install imagemagick

4/10

Maintained action available

reality2byte/checkout/localclone

Action for checking out a repo

4/10

garnet-org/action

Kernel-level execution records for GitHub Actions

8/10

step-security/protobuf-ci/sccache

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

step-security/rust-cache/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action that implements smart caching for rust/cargo projects. Secure drop-in replacement for Swatinem/rust-cache.

8/10