StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

approved-3rd-party-actions/expo-github-action/.github/actions/setup

approved-3rd-party-actions/expo-github-action/.github/actions/setup

Expo GitHub Action makes it easy to automate EAS builds or updates

3/10
step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.

10/10
chainguard-dev/actions/apko-build

chainguard-dev/actions/apko-build

A collection of reusable Github Actions workflows.

8/10
caffeelake/cilium/.github/actions/kind-external-targets

caffeelake/cilium/.github/actions/kind-external-targets

eBPF-based Networking, Security, and Observability

3/10
atlassian-labs/artifact-publish-token

atlassian-labs/artifact-publish-token

Custom Action to retrieve temporary tokens to publish artifacts

4/10
frits-v/cloud-foundation-fabric/.github/actions/fabric-tests

frits-v/cloud-foundation-fabric/.github/actions/fabric-tests

End-to-end modular samples for Terraform on GCP.

2/10
grafana/epimetheus/.github/promci/actions/publish_main

grafana/epimetheus/.github/promci/actions/publish_main

FrostDB backed Prometheus fork

3/10
luisenmarroquin/setup-ssh-action

luisenmarroquin/setup-ssh-action

GitHub Action that sets up your SSH key on the Virtual Environment

2/10
lgtm-hq/lgtm-ci/.github/actions/harden-runner

lgtm-hq/lgtm-ci/.github/actions/harden-runner

Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions

8/10
veeezo/docs-1/.github/actions/slack-alert

veeezo/docs-1/.github/actions/slack-alert

The open-source repo for docs.github.com

4/10
Maintained action available
microsoft/powerplatform-actions/set-online-solution-version

microsoft/powerplatform-actions/set-online-solution-version

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

6/10
ashutoshvarma/setup-ninja

ashutoshvarma/setup-ninja

Set up your GitHub Actions workflow with a specific version of ninja

3/10
kilianpaquier/semantic-release-requests/.github/actions/version

kilianpaquier/semantic-release-requests/.github/actions/version

Pull requests creation plugin for semantic-release to avoid pushing changes directly with @semantic-release/git and create requests from release candidate branches

4/10
pulumi/esc-export-secrets-action

pulumi/esc-export-secrets-action

A GitHub Action to export GitHub Actions secrets to Pulumi ESC

2/10
chainguard-dev/tw/.github/actions/shellcheck

chainguard-dev/tw/.github/actions/shellcheck

4/10
Maintained action available
bjw-s/action-prettier-lint

bjw-s/action-prettier-lint

GitHub Action to check if prettier has been run against files

4/10
pixta-dev/repository-mirroring-action

pixta-dev/repository-mirroring-action

A GitHub Action for mirroring a repository to another repository

6/10
step-security/protobuf-ci/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/protobuf-ci/__builder_checkout_dir__/.github/actions/secure-download-artifact

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
git-hub-chris/visualstudiocode/actions/commands

git-hub-chris/visualstudiocode/actions/commands

Microsoft Visual Studio Code.

6/10
step-security/secure-workflows/automate-pr

step-security/secure-workflows/automate-pr

Orchestrate GitHub Actions Security

6/10