StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

jonathancombs782/bitcoin/.github/actions/save-caches

jonathancombs782/bitcoin/.github/actions/save-caches

Bitcoin Core integration/staging tree

6/10
grafana/opentelemetry-ebpf-profiler/.github/workflows/fill

grafana/opentelemetry-ebpf-profiler/.github/workflows/fill

The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

6/10
approved-3rd-party-actions/commit-message-checker

approved-3rd-party-actions/commit-message-checker

GitHub Action that checks commit messages of pushes and pull request against a regex pattern

2/10
grafana/grafana/.github/actions/changelog

grafana/grafana/.github/actions/changelog

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10
hadolint/hadolint-action

hadolint/hadolint-action

GitHub action for Hadolint, A Dockerfile linting tool

6/10
surrealdb/rocksdb/.github/actions/pre-steps

surrealdb/rocksdb/.github/actions/pre-steps

A library that provides an embeddable, persistent key-value store for fast storage.

4/10
aks-lts/test-infra

aks-lts/test-infra

LTS specific configuration and tooling for testing

3/10
hashicorp/sentinel-github-actions

hashicorp/sentinel-github-actions

6/10
yonasbsd/posthog/.github/actions/build-n-cache-image

yonasbsd/posthog/.github/actions/build-n-cache-image

๐Ÿฆ” PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.

2/10
Maintained action available
slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact

slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact

Language-agnostic SLSA provenance generation for Github Actions

4/10
rjdbcm/ozi-publish

rjdbcm/ozi-publish

OZI action - publish releases to PyPI; and mirror releases, signature bundles, and provenance in a tagged release

6/10
step-security/databricks-setup-cli

step-security/databricks-setup-cli

Sets up the Databricks CLI in your GitHub Actions workflow. Secure drop-in replacement for databricks/setup-cli.

10/10
Maintained by StepSecurity
ai-dynamo/dynamo/.github/actions/public-layout.tsx

ai-dynamo/dynamo/.github/actions/public-layout.tsx

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
masci/datadog

masci/datadog

Send Datadog metrics, events, service checks and logs from GitHub workflows

2/10
nvidia/openshell/.github/actions/setup-e2e-vm-driver

nvidia/openshell/.github/actions/setup-e2e-vm-driver

OpenShell is the safe, private runtime for autonomous AI agents.

6/10
kong/public-shared-actions/pr-previews/validate

kong/public-shared-actions/pr-previews/validate

Shared actions available to both public and private repositories

5/10
step-integration-tests/auto-pdpr-test-01664-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-01664-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
pytorch/text/test-infra/.github/actions/chown-directory

pytorch/text/test-infra/.github/actions/chown-directory

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10
dustin4444/vscode-cpptools/.github/actions/locker

dustin4444/vscode-cpptools/.github/actions/locker

Official repository for the Microsoft C/C++ extension for VS Code.

4/10
Maintained action available
step-security/gh-action-pypi-publish/test

step-security/gh-action-pypi-publish/test

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish. Secure drop-in replacement for pypa/gh-action-pypi-publish.

10/10