StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

asdf-vm/actions/plugin-test

asdf-vm/actions/plugin-test

GitHub Actions for the asdf version manager

7/10
step-security/woke-action-reviewdog/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/woke-action-reviewdog/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

woke GitHub Action using reviewdog. Secure drop-in replacement for get-woke/woke-action-reviewdog.

10/10
step-security/envsubst-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

step-security/envsubst-action/__BUILDER_CHECKOUT_DIR__/.github/actions/privacy-check

Github Action for envsubst. Secure drop-in replacement for danielr1996/envsubst-action.

10/10
UpsideDownST/cyber-bootstrap

UpsideDownST/cyber-bootstrap

2/10
mig4/setup-bats

mig4/setup-bats

GitHub Action to setup BATS testing framework

3/10
step-security/github-api-commit-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

step-security/github-api-commit-action/__BUILDER_CHECKOUT_DIR__/.github/actions/secure-download-artifact

Commits changes to the repository through the Github api instead of traditional git commands. Secure drop-in replacement for grafana/github-api-commit-action.

10/10
sbdchd/squawk-action

sbdchd/squawk-action

Github Action for Linting Postgres Migrations with Squawk

2/10
elastic/terranova/.github/workflows/env-install

elastic/terranova/.github/workflows/env-install

Terranova is a thin wrapper for Terraform that provides extra tools and logic to handle Terraform configurations at scale.

6/10
chikin-4x/aws-cloudformation-github-deploy

chikin-4x/aws-cloudformation-github-deploy

Deploys AWS CloudFormation Stacks

2/10
Vendic/github-extract-task-ids-action

Vendic/github-extract-task-ids-action

Extract task ids from commit messages, branch and pull request title

0/10
step-security/setup-maven

step-security/setup-maven

Set up your GitHub Actions workflow with a specific version of Apache Maven. Secure drop-in replacement for stCarolas/setup-maven.

10/10
Maintained by StepSecurity
yonasBSD/iggy/.github/actions/csharp-dotnet/post-merge

yonasBSD/iggy/.github/actions/csharp-dotnet/post-merge

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

4/10
Maintained action available
step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/wp-json/oembed

step-security/ansible-galaxy-action/__BUILDER_CHECKOUT_DIR__/.github/actions/wp-json/oembed

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
actions-security-demo/pytorch/.github/actions/setup-win

actions-security-demo/pytorch/.github/actions/setup-win

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10
buildjet/cache

buildjet/cache

Cache dependencies and build outputs in GitHub Actions

2/10
ministryofjustice/laa-reusable-github-actions/.github/actions/ecr-auth

ministryofjustice/laa-reusable-github-actions/.github/actions/ecr-auth

A collection of re-useable GitHub actions

7/10
OpenZeppelin/openzeppelin-foundry-upgrades/.github/actions/setup

OpenZeppelin/openzeppelin-foundry-upgrades/.github/actions/setup

Foundry library for deploying and managing upgradeable contracts

2/10
borales/actions-yarn

borales/actions-yarn

GitHub Action for interacting with yarn

7/10
CatChen/check-git-status-action

CatChen/check-git-status-action

Do you check in dependency packages or build artefacts? If yes this GitHub Action helps you ensure they are not out-of-sync.

4/10
step-security/git-tag-action

step-security/git-tag-action

[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.

10/10
Maintained by StepSecurity