StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/action-branch-name

step-security/action-branch-name

Github action to enforce naming convention on branch names. Secure drop-in replacement for deepakputhraya/action-branch-name.

10/10
Maintained by StepSecurity
approved-3rd-party-actions/expo-github-action/.github/actions/setup

approved-3rd-party-actions/expo-github-action/.github/actions/setup

Expo GitHub Action makes it easy to automate EAS builds or updates

3/10
step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-openfga-test/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.

10/10
chainguard-actions/test-summary-action

chainguard-actions/test-summary-action

2/10
Maintained action available
caffeelake/openbao/.github/actions/fill

caffeelake/openbao/.github/actions/fill

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

3/10
Maintained action available
philips-software/amp-devcontainer/.github/actions/public-layout.tsx

philips-software/amp-devcontainer/.github/actions/public-layout.tsx

πŸ”‹amp-devcontainer is a batteries-included devcontainer useable for modern software development

7/10
yonasbsd/strapi/.github/actions/image

yonasbsd/strapi/.github/actions/image

πŸš€ Strapi is the leading open-source headless CMS. It’s 100% JavaScript/TypeScript, fully customizable and developer-first.

4/10
Maintained action available
tempoxyz/gh-actions/vendor/dtolnay/fill

tempoxyz/gh-actions/vendor/dtolnay/fill

Reusable GitHub Actions for Tempo

4/10
Maintained action available
chainguard-dev/actions/apko-build

chainguard-dev/actions/apko-build

A collection of reusable Github Actions workflows.

8/10
caffeelake/cilium/.github/actions/kind-external-targets

caffeelake/cilium/.github/actions/kind-external-targets

eBPF-based Networking, Security, and Observability

3/10
tempoxyz/accounts/.github/actions/install-dependencies

tempoxyz/accounts/.github/actions/install-dependencies

Accounts SDK for Apps and Wallets building on Tempo.

7/10
atlassian-labs/artifact-publish-token

atlassian-labs/artifact-publish-token

Custom Action to retrieve temporary tokens to publish artifacts

5/10
Maintained action available
frits-v/cloud-foundation-fabric/.github/actions/fabric-tests

frits-v/cloud-foundation-fabric/.github/actions/fabric-tests

End-to-end modular samples for Terraform on GCP.

2/10
grafana/epimetheus/.github/promci/actions/publish_main

grafana/epimetheus/.github/promci/actions/publish_main

FrostDB backed Prometheus fork

0/10
luisenmarroquin/setup-ssh-action

luisenmarroquin/setup-ssh-action

GitHub Action that sets up your SSH key on the Virtual Environment

2/10
lgtm-hq/lgtm-ci/.github/actions/harden-runner

lgtm-hq/lgtm-ci/.github/actions/harden-runner

Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions

7/10
proofhouse/github-actions/.github/actions/setup-vale

proofhouse/github-actions/.github/actions/setup-vale

6/10
veeezo/docs-1/.github/actions/slack-alert

veeezo/docs-1/.github/actions/slack-alert

The open-source repo for docs.github.com

2/10
microsoft/powerplatform-actions/set-online-solution-version

microsoft/powerplatform-actions/set-online-solution-version

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

5/10
fullsend-ai/fullsend/.defaults/.github/actions/mint-token

fullsend-ai/fullsend/.defaults/.github/actions/mint-token

On the path to fully autonomous agentic engineering

6/10