StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

coinbase/cds/.github/actions/setup-android

coinbase/cds/.github/actions/setup-android

Coinbase Design System

4/10
Maintained action available
caffeelake/airbyte/.github/actions/start-aws-runner

caffeelake/airbyte/.github/actions/start-aws-runner

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

2/10
Maintained action available
rapidsai/velox-testing/velox-testing/.github/actions/apply-provenance-labels

rapidsai/velox-testing/velox-testing/.github/actions/apply-provenance-labels

7/10
nvidia-nemo/export-deploy/.github/actions/test-template

nvidia-nemo/export-deploy/.github/actions/test-template

A library for exporting models including NeMo and Hugging Face to optimized inference backends, and deploying them for efficient querying

8/10
nvidia/numba-cuda/.github/actions/image

nvidia/numba-cuda/.github/actions/image

The CUDA target for Numba

6/10
envoyproxy/toolshed/gh-actions/bind-mounts

envoyproxy/toolshed/gh-actions/bind-mounts

7/10
openzeppelin/tron-contracts/.github/actions/gas-compare

openzeppelin/tron-contracts/.github/actions/gas-compare

5/10
Maintained action available
step-security/gha-setup-yq/__builder_checkout_dir__/.github/actions/privacy-check

step-security/gha-setup-yq/__builder_checkout_dir__/.github/actions/privacy-check

gha-setup-yq is a GitHub action to install the yq command line YAML parser. Secure drop-in replacement for vegardit/gha-setup-yq.

10/10
step-security/release-on-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/release-on-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action to create a git tag + release when pushed to master. Secure drop-in replacement for rymndhng/release-on-push-action.

10/10
step-security/sonarqube-scan-action

step-security/sonarqube-scan-action

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

10/10
Maintained by StepSecurity
checkmarx-ts/checkmarx-github-action

checkmarx-ts/checkmarx-github-action

Checkmarx Scan Github Action

4/10
carlosperate/download-file-action

carlosperate/download-file-action

GitHub Action to download a file from the internet into the workspace to use in your workflow.

3/10
nam20485/docs-1/.github/actions/get-docs-early-access

nam20485/docs-1/.github/actions/get-docs-early-access

The open-source repo for docs.github.com

0/10
step-security/read-yaml/__builder_checkout_dir__/.github/actions/action.yml

step-security/read-yaml/__builder_checkout_dir__/.github/actions/action.yml

A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.

9/10
mic92/hestia/matrix

mic92/hestia/matrix

Nix binary cache and build matrix for GitHub Actions: eval once, build checks in parallel jobs, deduplicated uploads, automatic GC, zero setup

4/10
Maintained action available
grafana/grafana-github-actions-go/github-release

grafana/grafana-github-actions-go/github-release

Grafana GitHub Actions in Golang

7/10
step-security/add-pr-comment/_next/static/chunks/app/layout-73a91f29ec5503c3.js

step-security/add-pr-comment/_next/static/chunks/app/layout-73a91f29ec5503c3.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
chitranklabs/monoline-ui/.github/actions/setup-bot

chitranklabs/monoline-ui/.github/actions/setup-bot

A token-first, responsive React component library and Tailwind CSS v4 design system built from my portfolio's visual language.

8/10
coveo/ui-kit/.github/actions/playwright-headless-ssr-commerce-nextjs

coveo/ui-kit/.github/actions/playwright-headless-ssr-commerce-nextjs

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
nvidia/aicr/.github/actions/generate-slsa-predicate

nvidia/aicr/.github/actions/generate-slsa-predicate

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10