StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

elastic/apm-agent-java/.github/workflows/stash

elastic/apm-agent-java/.github/workflows/stash

8/10
JuliaRegistries/Registrator.jl

JuliaRegistries/Registrator.jl

Julia package registration bot

3/10
Maintained action available
yonasBSD/servo/.github/actions/parse_msrv

yonasBSD/servo/.github/actions/parse_msrv

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

3/10
seemethere/download-artifact-s3

seemethere/download-artifact-s3

2/10
docker/setup-qemu-action

docker/setup-qemu-action

GitHub Action to install QEMU static binaries

8/10
op5dev/tf-via-pr

op5dev/tf-via-pr

Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.

7/10
mheap/github-action-required-labels

mheap/github-action-required-labels

Fail the build if/unless a certain combination of labels are applied to a pull request

4/10
nanasess/setup-chromedriver

nanasess/setup-chromedriver

ChromeDriver for use in GitHub Actions

7/10
peter-evans/create-issue-from-file

peter-evans/create-issue-from-file

A GitHub action to create an issue using content from a file

6/10
coveo/ui-kit/.github/actions/setup-sfdx

coveo/ui-kit/.github/actions/setup-sfdx

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
hashicorp/ghaction-import-gpg

hashicorp/ghaction-import-gpg

DEPRECATED - GitHub action to import GPG private key

5/10
NuGet/login

NuGet/login

Connect to nuget.org

5/10
asana/push-signed-commits

asana/push-signed-commits

This composite Github Action uses the createCommitOnBranch GraphQL mutation to allow Github Apps to push 'Verified' commits to Github.

3/10
ministryofjustice/hmpps-delius-operational-automation/.github/actions/send-slack-notification

ministryofjustice/hmpps-delius-operational-automation/.github/actions/send-slack-notification

6/10
grafana/alloy/_shared-workflows-dockerhub-login/actions/get-vault-secrets

grafana/alloy/_shared-workflows-dockerhub-login/actions/get-vault-secrets

OpenTelemetry Collector distribution with programmable pipelines

6/10
rokroskar/workflow-run-cleanup-action

rokroskar/workflow-run-cleanup-action

Github action to cancel previous running instances of a workflow.

5/10
apecloud-inc/gha-cherry-pick

apecloud-inc/gha-cherry-pick

GitHub Action to automatically cherry pick PRs to branches

3/10
utilitywarehouse/ghaction-wix

utilitywarehouse/ghaction-wix

Github Action for Wix toolset

2/10
Git-Hub-Chris/VisualStudioCode/actions/regex-labeler

Git-Hub-Chris/VisualStudioCode/actions/regex-labeler

Microsoft Visual Studio Code.

6/10
ministryofjustice/hmpps-github-actions/.github/actions/security_veracode_prepare_artifacts

ministryofjustice/hmpps-github-actions/.github/actions/security_veracode_prepare_artifacts

Github actions for HMPPS projects

6/10