StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

coveooss/snapshots-github-actions/.github/actions/image

coveooss/snapshots-github-actions/.github/actions/image

An example of how-to manage your Coveo Organization with Code, GHA, and the Coveo CLI

3/10
step-security/release-please-action/__builder_checkout_dir__/.github/actions/image

step-security/release-please-action/__builder_checkout_dir__/.github/actions/image

automated releases based on conventional commits. Secure drop-in replacement for googleapis/release-please-action.

8/10
febiosoftware/febio-workflows/.github/actions/create-sdk

febiosoftware/febio-workflows/.github/actions/create-sdk

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

2/10
Maintained action available
aws-actions/configure-aws-credentials

aws-actions/configure-aws-credentials

Configure AWS credential environment variables for use in other GitHub Actions.

9/10
tanker187/node-semver/.github/actions/create-check

tanker187/node-semver/.github/actions/create-check

The semver parser for node (the one npm uses)

6/10
tannergolden/standards/actions/standards-version

tannergolden/standards/actions/standards-version

Reusable GitHub Actions workflows and composite actions for any language or toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, secret and dependency scanning, release automation, branch protection, and a shared label taxonomy.

5/10
asyncapi/saunter/.github/image

asyncapi/saunter/.github/image

Saunter is a code-first AsyncAPI documentation generator for dotnet.

5/10
sersoft-gmbh/xcodebuild-action

sersoft-gmbh/xcodebuild-action

A GitHub action that runs xcodebuild

6/10
step-security/gradle-actions/__builder_checkout_dir__/.github/actions/privacy-check

step-security/gradle-actions/__builder_checkout_dir__/.github/actions/privacy-check

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub. Secure drop-in replacement for gradle/actions.

8/10
step-security/tfclean/__builder_checkout_dir__/.github/actions/privacy-check

step-security/tfclean/__builder_checkout_dir__/.github/actions/privacy-check

tfclean is tool to remove applied moved block, import block, etc. Secure drop-in replacement for takaishi/tfclean.

10/10
step-security/setup-qemu-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/setup-qemu-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

8/10
jfagoagas/grafana/actions/has-matching-release-tag

jfagoagas/grafana/actions/has-matching-release-tag

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10
ministryofjustice/github-actions/clean-actions-runner

ministryofjustice/github-actions/clean-actions-runner

A collection of reusable GitHub Actions for the Ministry of Justice, designed to streamline and enhance workflows across our projects. โ€ข This repository is defined and managed in Terraform

6/10
ruby/setup-ruby

ruby/setup-ruby

An action to download a prebuilt Ruby and add it to the PATH in 5 seconds

6/10
anz-bank/vscode-sysl/.github/action/github-tag-action

anz-bank/vscode-sysl/.github/action/github-tag-action

VS Code extension for SYSL Language

2/10
mdjahid11978-design/next.js-1/.github/actions/image

mdjahid11978-design/next.js-1/.github/actions/image

The React Framework

2/10
ianlewis/todo-issue-reopener

ianlewis/todo-issue-reopener

Reopen issues that are still referenced by TODOs

6/10
devantler-tech/ksail/.github/actions/warm-mirror-cache

devantler-tech/ksail/.github/actions/warm-mirror-cache

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
politicalsphere/ci/.github/actions/build

politicalsphere/ci/.github/actions/build

CI/CD pipelines and GitHub Actions for Political Sphere

2/10
vbem/k8s-port-forward

vbem/k8s-port-forward

An action forward local ports to workloads in Kubernetes.

3/10