StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/add-pr-comment/_next/static/chunks/87608-0364d2a3d7267426.js

step-security/add-pr-comment/_next/static/chunks/87608-0364d2a3d7267426.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
kong/proxy-wasm-rust-response-transformer/.github/actions/setup

kong/proxy-wasm-rust-response-transformer/.github/actions/setup

Response Transformer WASM Filter written in Rust

3/10
pytorch/text/test-infra/.github/actions/setup-binary-upload

pytorch/text/test-infra/.github/actions/setup-binary-upload

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10
jjchange10/test-actions/.github/actions/fill

jjchange10/test-actions/.github/actions/fill

2/10
Maintained action available
aerospike/aerospike-client-csharp/.github/actions/run-ee-server

aerospike/aerospike-client-csharp/.github/actions/run-ee-server

Aerospike C# Client Library

6/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_release_results

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_release_results

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10
supercharge/redis-github-action

supercharge/redis-github-action

Use Redis in GitHub Actions

5/10
check-spelling/check-spelling

check-spelling/check-spelling

Spelling checker action to check spelling in repositories / pull requests / commits

6/10
natescherer/changelog-management-action

natescherer/changelog-management-action

A GitHub action to parse and update changelogs in Keep a Changelog 1.0.0 format; built on the ChangelogManagement PowerShell module.

5/10
step-security/claude-code-action/__builder_checkout_dir__/.github/actions/fill

step-security/claude-code-action/__builder_checkout_dir__/.github/actions/fill

Secure drop-in replacement for anthropics/claude-code-action.

10/10
yoheimuta/action-protolint

yoheimuta/action-protolint

Run protolint with reviewdog

3/10
tomhjp/gh-action-jira-create

tomhjp/gh-action-jira-create

GitHub action to create Jira tickets with customisable fields

3/10
openzeppelin/openzeppelin-community-contracts/.github/actions/image

openzeppelin/openzeppelin-community-contracts/.github/actions/image

Solidity library of smart contracts from the OpenZeppelin Community

4/10
Maintained action available
phips28/gh-action-bump-version

phips28/gh-action-bump-version

GitHub Action for automated npm version bump.

5/10
Maintained action available
huntridge-labs/argus/.github/actions/scanner-bandit

huntridge-labs/argus/.github/actions/scanner-bandit

Argus brings โ€œa hundred eyesโ€ to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
deepcode-ai/codeql/ql/.github/actions/fetch-codeql

deepcode-ai/codeql/ql/.github/actions/fetch-codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

2/10
git-hub-chris/visualstudiocode/actions/public-layout.tsx

git-hub-chris/visualstudiocode/actions/public-layout.tsx

Microsoft Visual Studio Code.

6/10
yonasbsd/surrealdb/.github/actions/setup-environment

yonasbsd/surrealdb/.github/actions/setup-environment

A scalable, distributed, collaborative, document-graph database, for the realtime web

4/10
Maintained action available
step-security/action-create-tag

step-security/action-create-tag

Simple GitHub action that can be used to create a tag inside a GitHub action. Secure drop-in replacement for rickstaa/action-create-tag.

10/10
Maintained by StepSecurity
neondatabase/neon-js/.github/actions/setup-jfrog-npm

neondatabase/neon-js/.github/actions/setup-jfrog-npm

An Javascript client for Neon Auth and Neon Data API

5/10
Maintained action available