StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

rorychan/jira-releases-action

rorychan/jira-releases-action

2/10
babel/actions/update-changelog

babel/actions/update-changelog

Babel specific github actions ๐Ÿค–

2/10
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
actions-security-demo/pytorch/pytorch/.github/actions/chown-workspace

actions-security-demo/pytorch/pytorch/.github/actions/chown-workspace

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10
microsoft/powerplatform-actions/actions-install

microsoft/powerplatform-actions/actions-install

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

7/10
facebook/pysa-action

facebook/pysa-action

GitHub Action for Pysa

5/10
fjacquet/ci/actions/setup-uv

fjacquet/ci/actions/setup-uv

Central reusable CI/CD workflows and composite actions

2/10
project-tick/meshmc/.github/actions/package/macos

project-tick/meshmc/.github/actions/package/macos

A custom launcher for Minecraft that allows you to easily manage multiple installations of Minecraft at once (Fork of MultiMC)

2/10
sobelow/action

sobelow/action

Sobelow GitHub

3/10
sonarsource/gh-action_release

sonarsource/gh-action_release

7/10
int128/docker-build-cache-config-action

int128/docker-build-cache-config-action

Generate effective cache parameters for docker/build-push-action in GitHub Actions

6/10
nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-build-typecheck

nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-build-typecheck

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/image

step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/image

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

8/10
nvidia-rtx/godot/.github/actions/godot-project-test

nvidia-rtx/godot/.github/actions/godot-project-test

NVIDIA fork of Godot Engine โ€“ Multi-platform 2D and 3D game engine

3/10
Maintained action available
nick-invision/retry

nick-invision/retry

Retries a GitHub Action step on failure or timeout

4/10
dotnet/docs-tools/actions/sequester

dotnet/docs-tools/actions/sequester

This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.

3/10
Maintained action available
step-security/dynamic-uses/.tmp-dynamic-uses

step-security/dynamic-uses/.tmp-dynamic-uses

Dynamically resolve and use another GitHub action

10/10
tektoncd/plumbing/.github/actions/setup-nightly-infra

tektoncd/plumbing/.github/actions/setup-nightly-infra

This repo holds configuration for infrastructure used across the tektoncd org ๐Ÿ—๏ธ

6/10
step-security/json-to-variables

step-security/json-to-variables

GitHub action reads JSON file and writes its content as environment variables. Secure drop-in replacement for antifree/json-to-variables.

10/10
Maintained by StepSecurity
vendic/copy-files-to-other-repositories

vendic/copy-files-to-other-repositories

GitHub Action that introduces support for global workflows. Global workflows are the one you update in just one repo and they are automatically updated in other repositories.

2/10