Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

rknightion/.github/.github/actions/broker-token

Shared GitHub config + reusable security/CI workflows for the rknightion repos

2/10

step-security/sonarqube-scan-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

10/10

step-security/action-swiftlint

GitHub Action for SwiftLint. Secure drop-in replacement for norio-nomura/action-swiftlint.

10/10

Maintained by StepSecurity

hatzelencio/branch-protection

1/10

step-security/install-datadog-ci-github-action/__builder_checkout_dir__/.github/actions/image

Secure drop-in replacement for DataDog/install-datadog-ci-github-action.

10/10

jofthev/secator/.github/actions/install

secator - the pentester's swiss knife

3/10

sh-cho/idt/__builder_checkout_dir__/.github/actions/public-layout.tsx

idt(id tool) - A fast, ergonomic CLI tool for working with various ID formats

5/10

ministryofjustice/laa-ccw-fees-service/.github/public-layout.tsx

Fees service calculator for CCW

4/10

git-actions/set-user

Set git user as `github-actions[bot]`

3/10

lududa/oss-fuzz/infra/cifuzz/actions/build_fuzzers

OSS-Fuzz - continuous fuzzing for open source software.

2/10

avular-robotics/fork-action-automatic-releases

READONLY: Auto-generated mirror for https://github.com/marvinpinto/actions/tree/master/packages/automatic-releases

3/10

step-security/setup-maven/__builder_checkout_dir__/.github/actions/secure-download-artifact

Set up your GitHub Actions workflow with a specific version of Apache Maven. Secure drop-in replacement for stCarolas/setup-maven.

10/10

coinbase/cds/.github/actions/visreg-comment-percy

Coinbase Design System

4/10

Maintained action available

saeedkolivand/ai-job-hunter-app/.github/actions/setup-rust

Local-first AI desktop assistant that scrapes job boards, matches roles to your resume, and auto-generates resumes & cover letters. Offline with Ollama, BYO API key, or route it through an AI CLI agent (Claude Code, Codex, Gemini CLI).

5/10

Maintained action available

nvidia/nemo/.github/actions/image

A scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)

5/10

Maintained action available

rknightion/.github/.github/actions/fill

Shared GitHub config + reusable security/CI workflows for the rknightion repos

2/10

firebase/firebase-admin-node/.github/actions/send-email

Firebase Admin Node.js SDK

6/10

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/experience/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

coursgranja91-hash/erk/.github/actions/setup-claude-erk

erk is a tool for the orchestration and management of plan-oriented agentic engineering.

3/10

step-integration-tests/auto-pdpr-test-56435-6/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10