StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

caffeelake/olmocr/.github/actions/setup-venv

caffeelake/olmocr/.github/actions/setup-venv

Toolkit for linearizing PDFs for LLM datasets/training

3/10
step-security/setup-testkube

step-security/setup-testkube

GitHub Action to set up the Testkube CLI. Secure drop-in replacement for kubeshop/setup-testkube.

8/10
Maintained by StepSecurity
luckypipewrench/pipelock

luckypipewrench/pipelock

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

8/10
wow-actions/auto-assign

wow-actions/auto-assign

๐ŸŽฏ Automatically add reviewers/assignees to issues/PRs

3/10
reality2byte/action/resolve-environment

reality2byte/action/resolve-environment

5/10
Maintained action available
step-security/ghaction-import-gpg/__builder_checkout_dir__/.github/actions/image

step-security/ghaction-import-gpg/__builder_checkout_dir__/.github/actions/image

GitHub Action to import a GPG key. Secure drop-in replacement for crazy-max/ghaction-import-gpg.

8/10
jgillis/fetch-gh-release-asset

jgillis/fetch-gh-release-asset

Github Action to download an asset from a Github release

3/10
jwlawson/actions-setup-bazel

jwlawson/actions-setup-bazel

2/10
scribd/github-action-datadog-reporting

scribd/github-action-datadog-reporting

5/10
approved-3rd-party-actions/create-pull-request

approved-3rd-party-actions/create-pull-request

A GitHub action to create a pull request for changes to your repository in the actions workspace

2/10
jianlins/llama.cpp/.github/actions/windows-setup-curl

jianlins/llama.cpp/.github/actions/windows-setup-curl

LLM inference in C/C++

5/10
Maintained action available
step-integration-tests/auto-pdpr-test-15908-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-15908-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/clickhouse/.github/actions/public-layout.tsx

yonasbsd/clickhouse/.github/actions/public-layout.tsx

ClickHouseยฎ is a real-time analytics DBMS

5/10
Maintained action available
launchdarkly/eventsource/.github/actions/fill

launchdarkly/eventsource/.github/actions/fill

Server Side Events client and server for Go

4/10
ammarahm-ed/ios-build-action

ammarahm-ed/ios-build-action

Build iOS project (.xcodeproj, .xcworkspace), and export ipa

3/10
vishnudxb/redis-cluster

vishnudxb/redis-cluster

Github action for running a redis cluster for your workflow

3/10
llvm/actions/issue-labeler

llvm/actions/issue-labeler

0/10
freshaengineering/merge-gatekeeper/.github/actions/github-actions/release-action

freshaengineering/merge-gatekeeper/.github/actions/github-actions/release-action

[DevEx] PR merge control - Branch protection enhancement, merge requirements validation, status check aggregation. | TypeScript, GitHub Actions

4/10
Maintained action available
step-security/bytecodealliance-actions

step-security/bytecodealliance-actions

GitHub actions to setup wasm-tools and wasmtime. Secure drop-in replacement for bytecodealliance/actions.

8/10
rudderlabs/rudder-ai-reviewer

rudderlabs/rudder-ai-reviewer

1/10
Maintained action available