StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

aerospike/aerospike-client-java-reactive/.github/actions/publish-build-info-to-jfrog

aerospike/aerospike-client-java-reactive/.github/actions/publish-build-info-to-jfrog

Reactive programming interfaces for the Aerospike Java client

6/10
slackapi/slack-health-score

slackapi/slack-health-score

A GitHub Action to report software project health score

4/10
Maintained action available
tannergolden/standards/actions/commit-check

tannergolden/standards/actions/commit-check

Reusable GitHub Actions workflows and composite actions for any language or toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, secret and dependency scanning, release automation, branch protection, and a shared label taxonomy.

5/10
abailly-akamai/action-eslint

abailly-akamai/action-eslint

Run eslint with reviewdog

2/10
angular/dev-infra/github-actions/bazel/configure-remote

angular/dev-infra/github-actions/bazel/configure-remote

Angular Development Infrastructure

6/10
envoyproxy/toolshed/gh-actions/jq

envoyproxy/toolshed/gh-actions/jq

6/10
pytorch/tensordict/test-infra/.github/actions/run-script-with-cache

pytorch/tensordict/test-infra/.github/actions/run-script-with-cache

TensorDict is a pytorch dedicated tensor container.

4/10
Maintained action available
check-spelling/check-spelling/.git/check-spelling-actions/upload-sarif

check-spelling/check-spelling/.git/check-spelling-actions/upload-sarif

Spelling checker action to check spelling in repositories / pull requests / commits

5/10
launchdarkly/php-server-sdk-shared-tests/.github/actions/ci

launchdarkly/php-server-sdk-shared-tests/.github/actions/ci

Unit test code shared by LaunchDarkly PHP SDK integration projects

4/10
mbta/actions/dialyzer

mbta/actions/dialyzer

GitHub Actions used by MBTA projects

6/10
surrealdb/surrealdb/.github/actions/build-linux

surrealdb/surrealdb/.github/actions/build-linux

A scalable, distributed, collaborative, document-graph database, for the realtime web

5/10
Maintained action available
pytorch/helion/.github/actions/install-pytorch-for-torchtpu

pytorch/helion/.github/actions/install-pytorch-for-torchtpu

A Python-embedded DSL that makes it easy to write fast, scalable ML kernels with minimal boilerplate.

6/10
maierj/fastlane-action

maierj/fastlane-action

A GitHub action for executing fastlane lanes.

5/10
Maintained action available
step-security/close-milestone/security/public-layout.tsx

step-security/close-milestone/security/public-layout.tsx

A Github action to remove a milestone by the milestone's name. Secure drop-in replacement for Akkjon/close-milestone.

8/10
g-core/ai-pr-reviewer

g-core/ai-pr-reviewer

AI-based Pull Request Summarizer and Reviewer with Chat Capabilities.

3/10
step-security/synthetics-ci-github-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/synthetics-ci-github-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Run Synthetic tests in your GitHub workflows with Datadog Continuous Testing. Secure drop-in replacement for DataDog/synthetics-ci-github-action.

10/10
web-infra-dev/rsdoctor-action

web-infra-dev/rsdoctor-action

A GitHub Action for comprehensive bundle size analysis and reporting using Rsdoctor

2/10
Maintained action available
nvidia/isaacteleop/.github/actions/setup-uv

nvidia/isaacteleop/.github/actions/setup-uv

The unified framework for sim & real robot teleoperation

7/10
slsa-framework/slsa-github-generator/actions/generator/generic/create-base64-subjects-from-file

slsa-framework/slsa-github-generator/actions/generator/generic/create-base64-subjects-from-file

Language-agnostic SLSA provenance generation for Github Actions

4/10
step-security/ad-m-github-push-action/__builder_checkout_dir__/.github/actions/fill

step-security/ad-m-github-push-action/__builder_checkout_dir__/.github/actions/fill

GitHub actions to push back to repository eg. updated code. Secure drop-in replacement for ad-m/github-push-action.

8/10