StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/databricks-setup-cli

step-security/databricks-setup-cli

Sets up the Databricks CLI in your GitHub Actions workflow. Secure drop-in replacement for databricks/setup-cli.

10/10
Maintained by StepSecurity
ai-dynamo/dynamo/.github/actions/public-layout.tsx

ai-dynamo/dynamo/.github/actions/public-layout.tsx

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
masci/datadog

masci/datadog

Send Datadog metrics, events, service checks and logs from GitHub workflows

3/10
Maintained action available
aerospike/aerospike-client-java-sdk/.github/actions/fill

aerospike/aerospike-client-java-sdk/.github/actions/fill

Aerospike Java Client

5/10
elastic/connectors/actions/public-layout.tsx

elastic/connectors/actions/public-layout.tsx

Official Elastic connectors for third-party data sources

6/10
step-security/pip-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/pip-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

Github Action to install Pip packages. Secure drop-in replacement for BSFishy/pip-action.

10/10
nvidia/openshell/.github/actions/setup-e2e-vm-driver

nvidia/openshell/.github/actions/setup-e2e-vm-driver

OpenShell is the safe, private runtime for autonomous AI agents.

6/10
kong/public-shared-actions/pr-previews/validate

kong/public-shared-actions/pr-previews/validate

Shared actions available to both public and private repositories

5/10
step-integration-tests/auto-pdpr-test-01664-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-01664-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
posthog/posthog/.github/actions/setup-sccache

posthog/posthog/.github/actions/setup-sccache

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools โ€“ AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more โ€“ capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10
Maintained action available
pytorch/text/test-infra/.github/actions/chown-directory

pytorch/text/test-infra/.github/actions/chown-directory

Models, data loaders and abstractions for language processing, powered by PyTorch

0/10
step-integration-tests/auto-pdpr-test-42825-7/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-42825-7/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
dustin4444/vscode-cpptools/.github/actions/locker

dustin4444/vscode-cpptools/.github/actions/locker

Official repository for the Microsoft C/C++ extension for VS Code.

5/10
Maintained action available
jahid11978/openclaw-2/.github/actions/ensure-base-commit

jahid11978/openclaw-2/.github/actions/ensure-base-commit

Your own personal AI assistant. Any OS. Any Platform. The lobster way. ๐Ÿฆž

3/10
step-security/gh-action-pypi-publish/test

step-security/gh-action-pypi-publish/test

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish. Secure drop-in replacement for pypa/gh-action-pypi-publish.

10/10
aerospike/aerospike-client-java-reactive/.github/actions/publish-build-info-to-jfrog

aerospike/aerospike-client-java-reactive/.github/actions/publish-build-info-to-jfrog

Reactive programming interfaces for the Aerospike Java client

6/10
oakoss/oakum/.github/actions/setup

oakoss/oakum/.github/actions/setup

5/10
slackapi/slack-health-score

slackapi/slack-health-score

A GitHub Action to report software project health score

3/10
Maintained action available
zavoloklom/shields/.github/actions/fill

zavoloklom/shields/.github/actions/fill

Concise, consistent, and legible badges in SVG and raster format

3/10
tannergolden/standards/actions/commit-check

tannergolden/standards/actions/commit-check

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.

5/10