StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/sonar-ruby/gh-action_release/image

sonarsource/sonar-ruby/gh-action_release/image

Ruby analyzer

6/10
nvidia-rtx/godot/.github/actions/setup-emsdk

nvidia-rtx/godot/.github/actions/setup-emsdk

NVIDIA fork of Godot Engine โ€“ Multi-platform 2D and 3D game engine

3/10
Maintained action available
step-security/action-send-mail/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-send-mail/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.

10/10
lhotari/sandboxed-trivy-action

lhotari/sandboxed-trivy-action

GitHub Action for Trivy, running inside a sandboxed Docker container

4/10
dustin4444/metaplex-program-library/.github/actions/yarn-install-and-verify

dustin4444/metaplex-program-library/.github/actions/yarn-install-and-verify

Smart contracts maintained by the Metaplex team

2/10
step-integration-tests/auto-pdpr-test-84794-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-84794-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-integration-tests/auto-pdpr-test-56791-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-56791-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/bytecodealliance-actions/wasm-tools/fill

step-security/bytecodealliance-actions/wasm-tools/fill

GitHub actions to setup wasm-tools and wasmtime. Secure drop-in replacement for bytecodealliance/actions.

10/10
kong/docs-plugin-toolkit/.github/reusable-steps/run-kong-oss

kong/docs-plugin-toolkit/.github/reusable-steps/run-kong-oss

4/10
chaos-mesh/chaos-mesh-action

chaos-mesh/chaos-mesh-action

3/10
step-security/action-staticcheck

step-security/action-staticcheck

๐Ÿถ Run staticcheck with reviewdog on pull requests to improve code review experience. Secure drop-in replacement for reviewdog/action-staticcheck.

10/10
Maintained by StepSecurity
ministryofjustice/laa-assess-a-claim-frontend/.github/actions/build_and_push

ministryofjustice/laa-assess-a-claim-frontend/.github/actions/build_and_push

Frontend application for the LAA Assess a Claim service

6/10
stacklet/superset/.github/actions/chart-testing-action

stacklet/superset/.github/actions/chart-testing-action

Apache Superset is a Data Visualization and Data Exploration Platform

7/10
porter-dev/setup-porter

porter-dev/setup-porter

Github Action for installing the Porter CLI

3/10
Maintained action available
pytorch/kineto/test-infra/.github/actions/setup-nvidia

pytorch/kineto/test-infra/.github/actions/setup-nvidia

A CPU+GPU Profiling library that provides access to timeline traces and hardware performance counters.

2/10
Maintained action available
sonarsource/sonar-scanner-gradle/.actions/get-build-number

sonarsource/sonar-scanner-gradle/.actions/get-build-number

SonarQube Scanner for Gradle

4/10
Maintained action available
knqyf263/trivy-issue-action

knqyf263/trivy-issue-action

GitHub Actions for creating GitHub Issues according to the Trivy scanning result

5/10
kitabisa/docker-slim-action

kitabisa/docker-slim-action

GitHub Action to minify container image by up to 30x (and for compiled languages even more) making it secure too!

3/10
anz-bank/sysl-go/.github/action/public-layout.tsx

anz-bank/sysl-go/.github/action/public-layout.tsx

Communication library used by SYSL-generated code written in Go.

2/10
philips-software/pull-request-report-action

philips-software/pull-request-report-action

GitHub action to collect Pull Request related Data and attached that as report to a Pull Request when it's merged.

3/10
Maintained action available