StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/test-reporting/__builder_checkout_dir__/.github/actions/privacy-check

step-security/test-reporting/__builder_checkout_dir__/.github/actions/privacy-check

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for phoenix-actions/test-reporting.

8/10
jbajic/buildifier

jbajic/buildifier

GitHub action for running Bazel's format tool buildifier.

4/10
burnett01/rsync-deployments

burnett01/rsync-deployments

GitHub Action for deploying code via rsync over ssh securely - used by 5k+ workflows!

8/10
step-security/slackify-markdown-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/slackify-markdown-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to convert markdown into Slack's mrkdwn. Secure drop-in replacement for LoveToKnow/slackify-markdown-action.

10/10
step-security/proof-html

step-security/proof-html

A GitHub Action to validate HTML, check links, and more โœ…. Secure drop-in replacement for anishathalye/proof-html.

10/10
Maintained by StepSecurity
step-security/gh-actions-lua

step-security/gh-actions-lua

GitHub action for Lua/LuaJIT. Secure drop-in replacement for leafo/gh-actions-lua.

10/10
Maintained by StepSecurity
rapidsai/velox-testing/.github/actions/test-benchmark-data-tools

rapidsai/velox-testing/.github/actions/test-benchmark-data-tools

6/10
oxidize-rb/actions/post-run

oxidize-rb/actions/post-run

4/10
Maintained action available
step-security/quarto-actions/public-layout.tsx

step-security/quarto-actions/public-layout.tsx

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10
reviewdog/reviewdog

reviewdog/reviewdog

๐Ÿถ Automated code review tool integrated with any code analysis tools regardless of programming language

6/10
nvidia/cuequivariance/.github/actions/setup-cuequivariance-jax

nvidia/cuequivariance/.github/actions/setup-cuequivariance-jax

cuEquivariance is a math library that is a collective of low-level primitives and tensor ops to accelerate widely-used models, like DiffDock, MACE, Allegro and NEQUIP, based on equivariant neural networks. Also includes kernels for accelerated structure prediction.

3/10
Maintained action available
pytorch/torchtitan/test-infra/.github/actions/teardown-linux

pytorch/torchtitan/test-infra/.github/actions/teardown-linux

A PyTorch native platform for training generative AI models

4/10
Maintained action available
googleapis/release-please

googleapis/release-please

generate release PRs based on the conventionalcommits.org spec

8/10
caffeelake/cilium/.github/actions/kind-external-network

caffeelake/cilium/.github/actions/kind-external-network

eBPF-based Networking, Security, and Observability

3/10
github/codeql-action/start-proxy

github/codeql-action/start-proxy

Actions for running CodeQL analysis

7/10
extractions/setup-crate

extractions/setup-crate

๐Ÿ“ฆ GitHub Action to install a Rust crate from a GitHub release

2/10
ai-dynamo/dynamo/.github/actions/skopeo-login

ai-dynamo/dynamo/.github/actions/skopeo-login

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
step-security/repo-sync-pull-request

step-security/repo-sync-pull-request

โคต๏ธ A GitHub Action for creating pull requests. Secure drop-in replacement for repo-sync/pull-request.

10/10
Maintained by StepSecurity
step-security/docs-as-code-confluence

step-security/docs-as-code-confluence

Publish the content of a folder to confluence Github Action. Secure drop-in replacement for Bhacaz/docs-as-code-confluence.

10/10
Maintained by StepSecurity
microsoft/powerplatform-actions/branch-solution

microsoft/powerplatform-actions/branch-solution

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

5/10