StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/sonarqube-scan-action

step-security/sonarqube-scan-action

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

9/10
Maintained by StepSecurity
checkmarx-ts/checkmarx-github-action

checkmarx-ts/checkmarx-github-action

Checkmarx Scan Github Action

4/10
carlosperate/download-file-action

carlosperate/download-file-action

GitHub Action to download a file from the internet into the workspace to use in your workflow.

3/10
nam20485/docs-1/.github/actions/get-docs-early-access

nam20485/docs-1/.github/actions/get-docs-early-access

The open-source repo for docs.github.com

0/10
step-security/read-yaml/__builder_checkout_dir__/.github/actions/action.yml

step-security/read-yaml/__builder_checkout_dir__/.github/actions/action.yml

A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.

8/10
grafana/grafana-github-actions-go/github-release

grafana/grafana-github-actions-go/github-release

Grafana GitHub Actions in Golang

7/10
step-security/add-pr-comment/_next/static/chunks/app/layout-73a91f29ec5503c3.js

step-security/add-pr-comment/_next/static/chunks/app/layout-73a91f29ec5503c3.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
coveo/ui-kit/.github/actions/playwright-headless-ssr-commerce-nextjs

coveo/ui-kit/.github/actions/playwright-headless-ssr-commerce-nextjs

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
nvidia/aicr/.github/actions/generate-slsa-predicate

nvidia/aicr/.github/actions/generate-slsa-predicate

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

6/10
kong/terragrunt-action

kong/terragrunt-action

GitHub action for setting up Terragrunt https://terragrunt.gruntwork.io

2/10
pietrobolcato/action-read-yaml

pietrobolcato/action-read-yaml

Custom github action used to read yaml files, supporting multiple keys and variable replacements

1/10
caffeelake/arrow/arrow/.github/actions/sync-nightlies

caffeelake/arrow/arrow/.github/actions/sync-nightlies

Apache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics

3/10
Maintained action available
tanker187/next.js/.github/actions/image

tanker187/next.js/.github/actions/image

The React Framework

3/10
eball/write-tag-to-version-file

eball/write-tag-to-version-file

A GitHub Action that fetches the latest git tag within a repo and writes this to a file.

3/10
jsumners-nr/gha-node-deps-divergent

jsumners-nr/gha-node-deps-divergent

A GitHub action to determine if Node.js dependencies have changed between a PR and the branch it is based upon.

2/10
elastic/docs-builder/actions/validate-path-prefixes-local

elastic/docs-builder/actions/validate-path-prefixes-local

7/10
step-security/swiftylab-ci/__builder_checkout_dir__/.github/actions/privacy-check

step-security/swiftylab-ci/__builder_checkout_dir__/.github/actions/privacy-check

Support files and configurations for SwiftyLab's CI. Secure drop-in replacement for SwiftyLab/ci.

10/10
aerospike/aerospike-client-go/.github/actions/fill

aerospike/aerospike-client-go/.github/actions/fill

Aerospike Client Go

4/10
step-security/action-branch-name

step-security/action-branch-name

Github action to enforce naming convention on branch names. Secure drop-in replacement for deepakputhraya/action-branch-name.

10/10
Maintained by StepSecurity
approved-3rd-party-actions/expo-github-action/.github/actions/setup

approved-3rd-party-actions/expo-github-action/.github/actions/setup

Expo GitHub Action makes it easy to automate EAS builds or updates

3/10