StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-24555-3/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-24555-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
gittools/actions/gitreleasemanager/addasset

gittools/actions/gitreleasemanager/addasset

GitHub Action that installs and uses the GitVersion and GitReleaseManager tools

5/10
Maintained action available
devantler-tech/actions/require-checks-in-pr

devantler-tech/actions/require-checks-in-pr

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
kong/volcano-docs/.github/actions/lint-docs

kong/volcano-docs/.github/actions/lint-docs

1/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/snyk-scan

ministryofjustice/hmpps-github-shared-actions/.github/actions/snyk-scan

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
docker/metadata-action

docker/metadata-action

GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker

8/10
nvidia/onnxruntime/.github/actions/locate-vcvarsall-and-setup-env

nvidia/onnxruntime/.github/actions/locate-vcvarsall-and-setup-env

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10
launchdarkly/dotnet-core/.github/actions/build-release

launchdarkly/dotnet-core/.github/actions/build-release

LaunchDarkly monorepo for .NET packages

5/10
Maintained action available
coinbase/cds/.github/actions/get-merge-base

coinbase/cds/.github/actions/get-merge-base

Coinbase Design System

4/10
Maintained action available
grafana/plugin-ci-workflows/actions/plugins/publish/check-and-create-stub

grafana/plugin-ci-workflows/actions/plugins/publish/check-and-create-stub

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10
servicenow/servicenow-devops-change

servicenow/servicenow-devops-change

4/10
dustin4444/slsa-github-generator/.github/actions/sign-attestations

dustin4444/slsa-github-generator/.github/actions/sign-attestations

Language-agnostic SLSA provenance generation for Github Actions

3/10
zvikar72/clawsec/.github/actions/sign-and-verify

zvikar72/clawsec/.github/actions/sign-and-verify

A complete security skill suite for OpenClaw's family of agents. Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.

3/10
paper2/github-actions-opentelemetry

paper2/github-actions-opentelemetry

GitHub Actions OpenTelemetry

3/10
Maintained action available
elastic/docs/.github/actions/docs-preview

elastic/docs/.github/actions/docs-preview

4/10
Maintained action available
step-security/terraform-composite-actions

step-security/terraform-composite-actions

Contains composit GitHub actions for use with Terraform AWS Module workflows. Secure drop-in replacement for clowdhaus/terraform-composite-actions.

10/10
picnicsupermarket/newrelic-java-agent/.github/actions/setup-environment

picnicsupermarket/newrelic-java-agent/.github/actions/setup-environment

The New Relic Java agent

4/10
defexistentia/coder-2.24.3-modified/.github/actions/test-cache/download

defexistentia/coder-2.24.3-modified/.github/actions/test-cache/download

2/10
pravipati-sandbox/checkout

pravipati-sandbox/checkout

Action for checking out a repo

2/10
step-integration-tests/auto-pdpr-test-64880-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-64880-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10