ActionRank
Check your actions

Find GitHub Actions you can actually trust

We score 750 actions across security, maintenance, popularity and reliability — 269 of them are abandoned.

AI & LLMCaching & ArtifactsCode Quality & LintingDeploymentDocker & ContainersNotificationsRelease & VersioningRepo AutomationSecuritySetup & EnvironmentsTesting & CoverageUtilities

Top rated actions

The highest composite scores across every category.

View all rankings
B
Fenceopenai/fence

A fence keeps things out, but also in. This project is still in early, and active development.

Active★ 129Updated 2 days ago82/100
B
aislop — AI Code Quality Gatescanaislop/aislop

Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 8 languages (TypeScript, JavaScript, Python, Go, Rust, Ruby, PHP). Sub-second, deterministic, no LLM at runtime. MIT-licensed.

Active★ 527Updated 9 days ago81/100
B
Terraform Plancds-snc/terraform-plan

GitHub Action to run Terraform plan and add a comment with the changes.

Active★ 64Updated 5 days ago80/100
B
Build and push Docker imagesdocker/build-push-action

GitHub Action to build and push Docker images with Buildx

Active★ 5.4kUpdated 23 days ago79/100
B
Docker Logindocker/login-action

GitHub Action to login against a Docker registry

Active★ 1.5kUpdated 3 days ago79/100
B
Docker Setup Buildxdocker/setup-buildx-action

GitHub Action to set up Docker Buildx

Active★ 1.4kUpdated 23 days ago79/100

Recently flagged: abandoned but still popular

Mutable tags plus unmaintained code are a supply-chain risk — the same conditions behind the tj-actions/changed-files compromise.

F
Step CI Actionstepci/stepci

Automated API Testing and Quality Assurance

Abandoned★ 1.9kUpdated 1 year ago37/100
F
Lost Pixellost-pixel/lost-pixel

Open source alternative to Percy, Chromatic, Applitools.

Abandoned★ 1.7kUpdated 3 months ago27/100
F
Create a Releaseactions/create-release

An Action to create releases via the GitHub Release API

Abandoned★ 1.4kUpdated 5 years ago30/100
F
Automatic Pull Requestirgolic/AutoPR

AutoPR autonomously wrote pull requests in response to issues

Abandoned★ 1.4kUpdated 4 months ago24/100
F
S3 Syncjakejarvis/s3-sync-action

🔄 GitHub Action to sync a directory with a remote S3 bucket 🧺

Abandoned★ 1.1kUpdated 6 years ago21/100
F
AI Code Review Actionvillesau/ai-codereviewer

AI Code Reviewer: Enhance your GitHub workflow with AI-powered code review! Get intelligent feedback and suggestions on pull requests using OpenAI's GPT-4 API, improving code quality and saving developers time.

Abandoned★ 1kUpdated 2 years ago38/100
See all abandoned actions

How scoring works

Every action gets a 0–100 score from four weighted dimensions.

Security35%

OpenSSF Scorecard, known advisories, SECURITY.md and release immutability.

Maintenance30%

Commit recency, release cadence and whether anyone still answers issues.

Popularity20%

Stars and contributor count, log-normalized so giants don't drown the field.

Reliability15%

Semver compliance, major-tag convention and breaking-change frequency.

Read the full methodology →

Browse by category

Ranked lists for every corner of the Actions ecosystem.

AI & LLM

Run AI-assisted review, generation and agent workflows in CI.

Caching & Artifacts

Cache dependencies and share build artifacts between jobs.

Code Quality & Linting

Lint, format and review code automatically.

Deployment

Actions that deploy code to clouds, servers, registries and platforms.

Docker & Containers

Build, tag, scan and push container images.

Notifications

Send build and deploy notifications to chat and issue trackers.

Release & Versioning

Automate releases, changelogs, tags and package publishing.

Repo Automation

Label, triage, greet, merge and manage issues and pull requests.

Security

Scan code, dependencies, secrets and workflows for vulnerabilities.

Setup & Environments

Install languages, runtimes and toolchains on runners.

Testing & Coverage

Run test suites, report results and track coverage.

Utilities

General-purpose workflow building blocks: checkout, scripts, file ops.