StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/zip-release/__builder_checkout_dir__/.github/actions/fill

step-security/zip-release/__builder_checkout_dir__/.github/actions/fill

GitHub action that can be used to create release zip archive. Secure drop-in replacement for TheDoctor0/zip-release.

10/10
pytorch/text/test-infra/.github/actions/setup-binary-upload

pytorch/text/test-infra/.github/actions/setup-binary-upload

Models, data loaders and abstractions for language processing, powered by PyTorch

0/10
jjchange10/test-actions/.github/actions/fill

jjchange10/test-actions/.github/actions/fill

3/10
Maintained action available
aerospike/aerospike-client-csharp/.github/actions/run-ee-server

aerospike/aerospike-client-csharp/.github/actions/run-ee-server

Aerospike C# Client Library

6/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_release_results

ministryofjustice/hmpps-github-shared-actions/.github/actions/slack_release_results

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
supercharge/redis-github-action

supercharge/redis-github-action

Use Redis in GitHub Actions

5/10
step-security/setup-beam

step-security/setup-beam

Set up your BEAM-based GitHub Actions workflow (Erlang, Elixir, Gleam, ...). Secure drop-in replacement for erlef/setup-beam.

10/10
Maintained by StepSecurity
check-spelling/check-spelling

check-spelling/check-spelling

Spelling checker action to check spelling in repositories / pull requests / commits

6/10
natescherer/changelog-management-action

natescherer/changelog-management-action

A GitHub action to parse and update changelogs in Keep a Changelog 1.0.0 format; built on the ChangelogManagement PowerShell module.

5/10
step-integration-tests/auto-pdpr-test-47784-3/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-47784-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/claude-code-action/__builder_checkout_dir__/.github/actions/fill

step-security/claude-code-action/__builder_checkout_dir__/.github/actions/fill

Secure drop-in replacement for anthropics/claude-code-action.

10/10
tempoxyz/gh-actions/vendor/lycheeverse/lychee-action

tempoxyz/gh-actions/vendor/lycheeverse/lychee-action

Reusable GitHub Actions for Tempo

4/10
Maintained action available
yoheimuta/action-protolint

yoheimuta/action-protolint

Run protolint with reviewdog

3/10
tomhjp/gh-action-jira-create

tomhjp/gh-action-jira-create

GitHub action to create Jira tickets with customisable fields

0/10
openzeppelin/openzeppelin-community-contracts/.github/actions/image

openzeppelin/openzeppelin-community-contracts/.github/actions/image

Solidity library of smart contracts from the OpenZeppelin Community

4/10
Maintained action available
phips28/gh-action-bump-version

phips28/gh-action-bump-version

GitHub Action for automated npm version bump.

4/10
Maintained action available
anchore/go-lzo/.github/actions/public-layout.tsx

anchore/go-lzo/.github/actions/public-layout.tsx

A LZO1X decompression library written in go that is permissively licensed

7/10
huntridge-labs/argus/.github/actions/scanner-bandit

huntridge-labs/argus/.github/actions/scanner-bandit

Argus brings โ€œa hundred eyesโ€ to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
deepcode-ai/codeql/ql/.github/actions/fetch-codeql

deepcode-ai/codeql/ql/.github/actions/fetch-codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

2/10
step-integration-tests/auto-pdpr-test-90987-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-90987-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10