Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

google-github-actions/auth

A GitHub Action for authenticating to Google Cloud.

9/10

technote-space/workflow-conclusion-action

GitHub action to get workflow conclusion.

4/10

Maintained action available

step-security/publish-unit-test-result-action

Secure drop-in replacement for EnricoMi/publish-unit-test-result-action

GitHub Action to publish unit test results on GitHub

10/10

Maintained by StepSecurity

actions/dependency-review-action

A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs

9/10

amannn/action-semantic-pull-request

A GitHub Action that ensures that your PR title matches the Conventional Commits spec.

5/10

Maintained action available

step-security/ghaction-import-gpg

Secure drop-in replacement for crazy-max/ghaction-import-gpg

GitHub Action to import a GPG key

10/10

Maintained by StepSecurity

aws-actions/configure-aws-credentials

Configure AWS credential environment variables for use in other GitHub Actions.

9/10

TimonVS/pr-labeler-action

Automatically labels your PRs based on branch name patterns

3/10

Maintained action available

step-security/workflow-dispatch

Secure drop-in replacement for benc-uk/workflow-dispatch

A GitHub Action for triggering workflows, using the `workflow_dispatch` event

10/10

Maintained by StepSecurity

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

9/10

dorny/paths-filter

Conditionally run actions based on files modified by PR

5/10

Maintained action available

step-security/retry

Secure drop-in replacement for nick-fields/retry

Retries a GitHub Action step on failure or timeout

10/10

Maintained by StepSecurity

stefanprodan/helm-gh-pages

A GitHub Action for publishing Helm charts to Github Pages

4/10

Maintained action available

dawidd6/action-send-mail

A GitHub Action to send an email to multiple recipients

5/10

Maintained action available

SonarSource/sonarcloud-github-action

Integrate SonarCloud code analysis to GitHub Actions

8/10

pypa/gh-action-pypi-publish

GitHub Action for publishing your package distribution files to PyPI

7/10

step-security/rust-cache

Secure drop-in replacement for Swatinem/rust-cache

A GitHub Action that implements smart caching for rust/cargo projects

10/10

Maintained by StepSecurity

gradle/wrapper-validation-action

Gradle Wrapper Validation Action

8/10

hashicorp/setup-terraform

Sets up Terraform CLI in your GitHub Actions workflow.

8/10

fkirc/skip-duplicate-actions

Save time and cost when using GitHub Actions

4/10

Maintained action available