StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

lost-pixel/lost-pixel

lost-pixel/lost-pixel

Open source alternative to Percy, Chromatic, Applitools.

3/10
step-integration-tests/auto-pdpr-test-40728-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-40728-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
cyber-dojo/snyk-scanning/.github/actions/image

cyber-dojo/snyk-scanning/.github/actions/image

Workflows for running snyk scans of individual artifacts and artifacts in a running Environment

6/10
step-integration-tests/auto-pdpr-test-56435-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-56435-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/dtolnay-rust-toolchain/__builder_checkout_dir__/.github/actions/privacy-check

step-security/dtolnay-rust-toolchain/__builder_checkout_dir__/.github/actions/privacy-check

Concise GitHub Action for installing a Rust toolchain. Secure drop-in replacement for dtolnay/rust-toolchain.

10/10
ferretdb/github-actions/linters

ferretdb/github-actions/linters

Shared GitHub Actions for FerretDB repos

5/10
politicalsphere/ci/.github/actions/ps-task/trufflehog

politicalsphere/ci/.github/actions/ps-task/trufflehog

CI/CD pipelines and GitHub Actions for Political Sphere

2/10
unionai/flytectl-setup-action

unionai/flytectl-setup-action

Install and setup flytectl for use in other actions

2/10
little-core-labs/install-terraform

little-core-labs/install-terraform

Install terraform to the current GitHub Actions job

3/10
tannergolden/standards/actions/prune-workflow-runs

tannergolden/standards/actions/prune-workflow-runs

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.

5/10
openapi-generators/openapitools-generator-action

openapi-generators/openapitools-generator-action

Generate a client library using the OpenAPITools Generator

3/10
pre-commit/action

pre-commit/action

a GitHub action to run `pre-commit`

5/10
tanker187/playwright/.github/actions/enable-microphone-access

tanker187/playwright/.github/actions/enable-microphone-access

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

4/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/viasat-fetch-ghdotcom-token-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/viasat-fetch-ghdotcom-token-action

Viasat-specific GitHub Action that uses GitHub OIDC + Vault to mint a short-lived (ephemeral) authenticated github.com token for use in GHES workflows (e.g., to avoid unauthenticated API rate limits).

5/10
Maintained action available
clementtsang/cargo-action

clementtsang/cargo-action

A simple GitHub Action to invoke cargo/cross.

4/10
nvidia/infra-controller/.github/actions/setup-mkosi-environment

nvidia/infra-controller/.github/actions/setup-mkosi-environment

NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking

5/10
Maintained action available
telegramdesktop/winget-releaser

telegramdesktop/winget-releaser

Publish new releases of your application to the Windows Package Manager easily.

3/10
sett-and-hive/sarif-to-issue-action

sett-and-hive/sarif-to-issue-action

A GitHub action for @security-alert/sarif-to-issue

5/10
openai/codex/.github/actions/public-layout.tsx

openai/codex/.github/actions/public-layout.tsx

Lightweight coding agent that runs in your terminal

6/10
aave-dao/github-workflows/.github/actions/fill

aave-dao/github-workflows/.github/actions/fill

a collection of github workflows used at aave

4/10