StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

git-hub-chris/visualstudiocode/actions/public-layout.tsx

git-hub-chris/visualstudiocode/actions/public-layout.tsx

Microsoft Visual Studio Code.

6/10
step-integration-tests/auto-pdpr-test-34006-6/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-34006-6/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/surrealdb/.github/actions/setup-environment

yonasbsd/surrealdb/.github/actions/setup-environment

A scalable, distributed, collaborative, document-graph database, for the realtime web

2/10
step-security/action-create-tag

step-security/action-create-tag

Simple GitHub action that can be used to create a tag inside a GitHub action. Secure drop-in replacement for rickstaa/action-create-tag.

10/10
Maintained by StepSecurity
neondatabase/neon-js/.github/actions/setup-jfrog-npm

neondatabase/neon-js/.github/actions/setup-jfrog-npm

An Javascript client for Neon Auth and Neon Data API

5/10
Maintained action available
jonathancombs782/bitcoin/.github/actions/save-caches

jonathancombs782/bitcoin/.github/actions/save-caches

Bitcoin Core integration/staging tree

5/10
grafana/opentelemetry-ebpf-profiler/.github/workflows/fill

grafana/opentelemetry-ebpf-profiler/.github/workflows/fill

The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

6/10
gitarcode/install-dotslash

gitarcode/install-dotslash

A simple GitHub Action to install a precompiled dotslash binary

4/10
approved-3rd-party-actions/commit-message-checker

approved-3rd-party-actions/commit-message-checker

GitHub Action that checks commit messages of pushes and pull request against a regex pattern

2/10
grafana/grafana/.github/actions/changelog

grafana/grafana/.github/actions/changelog

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

5/10
Maintained action available
hashicorp/actions-go-build/self-test

hashicorp/actions-go-build/self-test

Define a reproducible Go build.

4/10
step-integration-tests/auto-pdpr-test-70320-3/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-70320-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
lovelycentury/openclaw/.github/actions/public-layout.tsx

lovelycentury/openclaw/.github/actions/public-layout.tsx

Your own personal AI assistant. Any OS. Any Platform. The lobster way. ๐Ÿฆž

3/10
hadolint/hadolint-action

hadolint/hadolint-action

GitHub action for Hadolint, A Dockerfile linting tool

6/10
surrealdb/rocksdb/.github/actions/pre-steps

surrealdb/rocksdb/.github/actions/pre-steps

A library that provides an embeddable, persistent key-value store for fast storage.

4/10
aks-lts/test-infra

aks-lts/test-infra

LTS specific configuration and tooling for testing

3/10
hashicorp/sentinel-github-actions

hashicorp/sentinel-github-actions

6/10
yonasbsd/posthog/.github/actions/build-n-cache-image

yonasbsd/posthog/.github/actions/build-n-cache-image

๐Ÿฆ” PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.

2/10
Maintained action available
slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact

slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact

Language-agnostic SLSA provenance generation for Github Actions

5/10
rjdbcm/ozi-publish

rjdbcm/ozi-publish

OZI action - publish releases to PyPI; and mirror releases, signature bundles, and provenance in a tagged release

6/10