StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

a-line-services/release-pilot

a-line-services/release-pilot

Agnostic package/library development/release CI/CD tool

2/10
chainguard-dev/actions/setup-registry

chainguard-dev/actions/setup-registry

A collection of reusable Github Actions workflows.

6/10
secureblue/approvals-action

secureblue/approvals-action

An action to require approvals from permissionless approvers

2/10
yonasbsd/aws-lc/.github/actions/configure-aws-credentials

yonasbsd/aws-lc/.github/actions/configure-aws-credentials

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It ั–s based on code from the Google BoringSSL project and the OpenSSL project.

2/10
Maintained action available
ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts

ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10
nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment

nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment

NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking

6/10
hoprnet/hopr-workflows/actions/release-version

hoprnet/hopr-workflows/actions/release-version

GitHub workflows helping HOPR automate tasks via actions

6/10
juliangruber/sleep-action

juliangruber/sleep-action

Sleep for a set period of time

0/10
yonasbsd/buck2/.github/actions/init_opam

yonasbsd/buck2/.github/actions/init_opam

Build system, successor to Buck

3/10
Maintained action available
openzeppelin/openzeppelin-upgrades/.github/actions/setup

openzeppelin/openzeppelin-upgrades/.github/actions/setup

Plugins for Hardhat and Foundry to deploy and manage upgradeable contracts on Ethereum.

4/10
Maintained action available
nvidia/model-optimizer/.github/actions/public-layout.tsx

nvidia/model-optimizer/.github/actions/public-layout.tsx

A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.

7/10
dawidd6/action-ansible-playbook

dawidd6/action-ansible-playbook

:gear: A GitHub Action for running Ansible playbooks

5/10
solana-developers/github-actions/extract-versions

solana-developers/github-actions/extract-versions

A collection of github actions to build, idl upload and verify programs. With Squads support

4/10
Maintained action available
approved-3rd-party-actions/upload-mobile-app-github-action

approved-3rd-party-actions/upload-mobile-app-github-action

The Github action to upload an mobile app file to Kobiton Apps Repo

3/10
actions/setup-java/v4.7.1

actions/setup-java/v4.7.1

Set up your GitHub Actions workflow with a specific version of Java

6/10
officedev/teamsfx-cli-action

officedev/teamsfx-cli-action

teasmfx CI/CD action

3/10
step-security/gh-setup/__builder_checkout_dir__/.github/actions/privacy-check

step-security/gh-setup/__builder_checkout_dir__/.github/actions/privacy-check

:octocat: Setup asset of Github releases. Secure drop-in replacement for k1LoW/gh-setup.

10/10
aquasecurity/tfsec-pr-commenter-action

aquasecurity/tfsec-pr-commenter-action

Add comments to pull requests where tfsec checks have failed

4/10
armbian/build

armbian/build

The official build framework for the Armbian Linux distribution. This repository contains the complete toolchain and scripts required to compile custom OS images from source, including kernel configuration, U-Boot handling, and board-specific tweaks for various ARM and ARM64 single-board computers.

7/10
step-security/hide-comment-action

step-security/hide-comment-action

Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

8/10
Maintained by StepSecurity