StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.

10/10
chainguard-actions/test-summary-action

chainguard-actions/test-summary-action

2/10
caffeelake/openbao/.github/actions/fill

caffeelake/openbao/.github/actions/fill

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

3/10
Maintained action available
yonasbsd/strapi/.github/actions/image

yonasbsd/strapi/.github/actions/image

πŸš€ Strapi is the leading open-source headless CMS. It’s 100% JavaScript/TypeScript, fully customizable and developer-first.

4/10
Maintained action available
chainguard-dev/actions/apko-build

chainguard-dev/actions/apko-build

A collection of reusable Github Actions workflows.

6/10
caffeelake/cilium/.github/actions/kind-external-targets

caffeelake/cilium/.github/actions/kind-external-targets

eBPF-based Networking, Security, and Observability

3/10
atlassian-labs/artifact-publish-token

atlassian-labs/artifact-publish-token

Custom Action to retrieve temporary tokens to publish artifacts

4/10
Maintained action available
frits-v/cloud-foundation-fabric/.github/actions/fabric-tests

frits-v/cloud-foundation-fabric/.github/actions/fabric-tests

End-to-end modular samples for Terraform on GCP.

2/10
grafana/epimetheus/.github/promci/actions/publish_main

grafana/epimetheus/.github/promci/actions/publish_main

FrostDB backed Prometheus fork

3/10
luisenmarroquin/setup-ssh-action

luisenmarroquin/setup-ssh-action

GitHub Action that sets up your SSH key on the Virtual Environment

2/10
lgtm-hq/lgtm-ci/.github/actions/harden-runner

lgtm-hq/lgtm-ci/.github/actions/harden-runner

Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions

7/10
veeezo/docs-1/.github/actions/slack-alert

veeezo/docs-1/.github/actions/slack-alert

The open-source repo for docs.github.com

2/10
microsoft/powerplatform-actions/set-online-solution-version

microsoft/powerplatform-actions/set-online-solution-version

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

6/10
ashutoshvarma/setup-ninja

ashutoshvarma/setup-ninja

Set up your GitHub Actions workflow with a specific version of ninja

3/10
kilianpaquier/semantic-release-requests/.github/actions/version

kilianpaquier/semantic-release-requests/.github/actions/version

Pull requests creation plugin for semantic-release to avoid pushing changes directly with @semantic-release/git and create requests from release candidate branches

4/10
pulumi/esc-export-secrets-action

pulumi/esc-export-secrets-action

A GitHub Action to export GitHub Actions secrets to Pulumi ESC

2/10
step-security/getsentry-action-release/main

step-security/getsentry-action-release/main

GitHub Action for creating a release on Sentry. Secure drop-in replacement for getsentry/action-release.

10/10
chainguard-dev/tw/.github/actions/shellcheck

chainguard-dev/tw/.github/actions/shellcheck

5/10
Maintained action available
bjw-s/action-prettier-lint

bjw-s/action-prettier-lint

GitHub Action to check if prettier has been run against files

4/10
pixta-dev/repository-mirroring-action

pixta-dev/repository-mirroring-action

A GitHub Action for mirroring a repository to another repository

6/10