StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ljharb/actions/bun/install

ljharb/actions/bun/install

GitHub actions I use for CI.

4/10
dustico/dusti-lock

dustico/dusti-lock

DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.

6/10
dmptrluke/django-cjswidget/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

dmptrluke/django-cjswidget/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

A replacement for the Select widget with fancy new features - powered by choices.js!

5/10
Maintained action available
projectdiscovery/actions/setup/nuclei

projectdiscovery/actions/setup/nuclei

ProjectDiscovery's Composite Actions

5/10
liri-infra/qmllint-action

liri-infra/qmllint-action

:heavy_plus_sign: Validates QML and JavaScript files

2/10
asdf-vm/actions/plugin-test

asdf-vm/actions/plugin-test

GitHub Actions for the asdf version manager

5/10
mig4/setup-bats

mig4/setup-bats

GitHub Action to setup BATS testing framework

3/10
sbdchd/squawk-action

sbdchd/squawk-action

Github Action for Linting Postgres Migrations with Squawk

2/10
elastic/terranova/.github/workflows/env-install

elastic/terranova/.github/workflows/env-install

Terranova is a thin wrapper for Terraform that provides extra tools and logic to handle Terraform configurations at scale.

6/10
chikin-4x/aws-cloudformation-github-deploy

chikin-4x/aws-cloudformation-github-deploy

Deploys AWS CloudFormation Stacks

2/10
step-security/setup-maven

step-security/setup-maven

Set up your GitHub Actions workflow with a specific version of Apache Maven. Secure drop-in replacement for stCarolas/setup-maven.

10/10
Maintained by StepSecurity
actions-security-demo/pytorch/.github/actions/setup-win

actions-security-demo/pytorch/.github/actions/setup-win

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10
nvlabs/warpconvnet/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

nvlabs/warpconvnet/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Make your wildest 3D ConvNet dream architectures come true

5/10
Maintained action available
buildjet/cache

buildjet/cache

Cache dependencies and build outputs in GitHub Actions

2/10
ministryofjustice/laa-reusable-github-actions/.github/actions/ecr-auth

ministryofjustice/laa-reusable-github-actions/.github/actions/ecr-auth

A collection of re-useable GitHub actions

8/10
step-security/import-codesign-certs/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/import-codesign-certs/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for Importing Code-signing Certificates into a Keychain. Secure drop-in replacement for Apple-Actions/import-codesign-certs.

9/10
louisbrunner/checks-action

louisbrunner/checks-action

GitHub Action which wraps calls to GitHub Checks API

7/10
step-security/git-tag-action

step-security/git-tag-action

[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.

10/10
Maintained by StepSecurity
enricomi/publish-unit-test-result-action/windows/bash

enricomi/publish-unit-test-result-action/windows/bash

GitHub Action to publish unit test results on GitHub

4/10
Maintained action available
step-security/gh-setup

step-security/gh-setup

:octocat: Setup asset of Github releases. Secure drop-in replacement for k1LoW/gh-setup.

10/10
Maintained by StepSecurity