StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

go-semantic-release/action

go-semantic-release/action

:octocat: semantic-release GitHub Action

5/10
envoyproxy/toolshed/actions/envoy/ci/fill

envoyproxy/toolshed/actions/envoy/ci/fill

7/10
che-incubator/setup-minikube-action

che-incubator/setup-minikube-action

Setup minikube to install/start Eclipse Che using as most as possible available memory/cpu

5/10
peterrhodesdev/build-a-badge

peterrhodesdev/build-a-badge

GitHub Action to create dynamic and customizable README badges using shields.io/endpoint

3/10
rudderlabs/rudder-transformer/.github/actions/restart-deployment

rudderlabs/rudder-transformer/.github/actions/restart-deployment

Open-source, warehouse-first Customer Data Pipeline and Segment-alternative. Collects and routes clickstream data and builds your customer data lake on your data warehouse.

3/10
Maintained action available
launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/image

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/image

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

4/10
step-security/protobuf-ci/../../_actions/current/bazel

step-security/protobuf-ci/../../_actions/current/bazel

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
caffeelake/gemini-cli/.github/actions/post-coverage-comment

caffeelake/gemini-cli/.github/actions/post-coverage-comment

An open-source AI agent that brings the power of Gemini directly into your terminal.

5/10
Maintained action available
nv-gha-runners/setup-bazel-cache

nv-gha-runners/setup-bazel-cache

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

4/10
step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

8/10
step-security/mise-action

step-security/mise-action

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

10/10
Maintained by StepSecurity
dustin4444/vscode-cpptools/.github/actions/stalecloser

dustin4444/vscode-cpptools/.github/actions/stalecloser

Official repository for the Microsoft C/C++ extension for VS Code.

5/10
Maintained action available
neondatabase/dev-actions/deploy-queue

neondatabase/dev-actions/deploy-queue

3/10
openzeppelin/ui-builder/.github/actions/auth-token

openzeppelin/ui-builder/.github/actions/auth-token

UI Builder is an open-source blockchain development tool that helps developers and non-developers create user-friendly interfaces for smart contract interaction by providing a chain-agnostic form builder that generates standalone "mini apps" without requiring backend infrastructure.

6/10
withgraphite/graphite-ci-action

withgraphite/graphite-ci-action

2/10
Maintained action available
turbocoder13/py-lintro/.github/actions/image

turbocoder13/py-lintro/.github/actions/image

Making linters play nice... Mostly.

7/10
step-security/swift-doc/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/swift-doc/__builder_checkout_dir__/.github/actions/secure-download-artifact

A documentation generator for Swift projects. Secure drop-in replacement for SwiftDocOrg/swift-doc.

8/10
grafana/k6-extension-actions/setup-eget

grafana/k6-extension-actions/setup-eget

Reusable composite GitHub actions to support k6 extension development.

4/10
bazelbuild/setup-bazelisk

bazelbuild/setup-bazelisk

Set up your GitHub Actions workflow with a specific version of Bazelisk

5/10
step-security/slash-command-dispatch/__builder_checkout_dir__/.github/actions/image

step-security/slash-command-dispatch/__builder_checkout_dir__/.github/actions/image

A GitHub action that facilitates "ChatOps" by creating repository dispatch events for slash commands. Secure drop-in replacement for peter-evans/slash-command-dispatch.

9/10