It's a public directory that scores GitHub Actions on security and maintenance: OpenSSF Scorecard results, known GHSA/CVE advisories, whether the action publishes immutable releases, and whether it has been abandoned. It currently tracks 750 actions, 269 of which have had no commit or release in over a year.
It complements the scanners already listed (zizmor, actionlint, octoscan, poutine) — those check your workflow files, this one tells you whether the third-party action you are about to depend on is still maintained and what its security posture looks like.
Free, no signup, no login wall. Not affiliated with GitHub, Inc.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/myugan/awesome-cicd-security/pull/31
**Author:** [@supertj](https://github.com/supertj)
**Created:** 8/2/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `add-actionrank`
---
### 📝 Commits (1)
- [`265681d`](https://github.com/myugan/awesome-cicd-security/commit/265681d6bd5f5731a36d9ccef98afd31a2d66acf) Add ActionRank to Tools
### 📊 Changes
**1 file changed** (+1 additions, -0 deletions)
<details>
<summary>View changed files</summary>
📝 `README.md` (+1 -0)
</details>
### 📄 Description
Adds [ActionRank](https://actionrank.dev) to the Tools section.
It's a public directory that scores GitHub Actions on security and maintenance: OpenSSF Scorecard results, known GHSA/CVE advisories, whether the action publishes immutable releases, and whether it has been abandoned. It currently tracks 750 actions, 269 of which have had no commit or release in over a year.
It complements the scanners already listed (zizmor, actionlint, octoscan, poutine) — those check *your* workflow files, this one tells you whether the third-party action you are about to depend on is still maintained and what its security posture looks like.
Free, no signup, no login wall. Not affiliated with GitHub, Inc.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/myugan/awesome-cicd-security/pull/31
Author: @supertj
Created: 8/2/2026
Status: 🔄 Open
Base:
main← Head:add-actionrank📝 Commits (1)
265681dAdd ActionRank to Tools📊 Changes
1 file changed (+1 additions, -0 deletions)
View changed files
📝
README.md(+1 -0)📄 Description
Adds ActionRank to the Tools section.
It's a public directory that scores GitHub Actions on security and maintenance: OpenSSF Scorecard results, known GHSA/CVE advisories, whether the action publishes immutable releases, and whether it has been abandoned. It currently tracks 750 actions, 269 of which have had no commit or release in over a year.
It complements the scanners already listed (zizmor, actionlint, octoscan, poutine) — those check your workflow files, this one tells you whether the third-party action you are about to depend on is still maintained and what its security posture looks like.
Free, no signup, no login wall. Not affiliated with GitHub, Inc.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.