StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/protobuf-ci/../../_actions/current/bazel

step-security/protobuf-ci/../../_actions/current/bazel

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
caffeelake/gemini-cli/.github/actions/post-coverage-comment

caffeelake/gemini-cli/.github/actions/post-coverage-comment

An open-source AI agent that brings the power of Gemini directly into your terminal.

5/10
Maintained action available
nv-gha-runners/setup-bazel-cache

nv-gha-runners/setup-bazel-cache

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

4/10
step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

8/10
step-security/mise-action

step-security/mise-action

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

10/10
Maintained by StepSecurity
dustin4444/vscode-cpptools/.github/actions/stalecloser

dustin4444/vscode-cpptools/.github/actions/stalecloser

Official repository for the Microsoft C/C++ extension for VS Code.

5/10
Maintained action available
neondatabase/dev-actions/deploy-queue

neondatabase/dev-actions/deploy-queue

0/10
openzeppelin/ui-builder/.github/actions/auth-token

openzeppelin/ui-builder/.github/actions/auth-token

UI Builder is an open-source blockchain development tool that helps developers and non-developers create user-friendly interfaces for smart contract interaction by providing a chain-agnostic form builder that generates standalone "mini apps" without requiring backend infrastructure.

6/10
withgraphite/graphite-ci-action

withgraphite/graphite-ci-action

2/10
Maintained action available
turbocoder13/py-lintro/.github/actions/image

turbocoder13/py-lintro/.github/actions/image

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

7/10
step-security/swift-doc/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/swift-doc/__builder_checkout_dir__/.github/actions/secure-download-artifact

A documentation generator for Swift projects. Secure drop-in replacement for SwiftDocOrg/swift-doc.

8/10
tempoxyz/gh-actions/vendor/socketdev/action

tempoxyz/gh-actions/vendor/socketdev/action

Reusable GitHub Actions for Tempo

4/10
Maintained action available
step-integration-tests/auto-pdpr-test-42825-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-42825-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
grafana/k6-extension-actions/setup-eget

grafana/k6-extension-actions/setup-eget

Reusable composite GitHub actions to support k6 extension development.

0/10
bazelbuild/setup-bazelisk

bazelbuild/setup-bazelisk

Set up your GitHub Actions workflow with a specific version of Bazelisk

0/10
step-security/slash-command-dispatch/__builder_checkout_dir__/.github/actions/image

step-security/slash-command-dispatch/__builder_checkout_dir__/.github/actions/image

A GitHub action that facilitates "ChatOps" by creating repository dispatch events for slash commands. Secure drop-in replacement for peter-evans/slash-command-dispatch.

9/10
a-line-services/release-pilot

a-line-services/release-pilot

Agnostic package/library development/release CI/CD tool

2/10
chainguard-dev/actions/setup-registry

chainguard-dev/actions/setup-registry

A collection of reusable Github Actions workflows.

6/10
secureblue/approvals-action

secureblue/approvals-action

An action to require approvals from permissionless approvers

0/10
yonasbsd/aws-lc/.github/actions/configure-aws-credentials

yonasbsd/aws-lc/.github/actions/configure-aws-credentials

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It ั–s based on code from the Google BoringSSL project and the OpenSSL project.

2/10
Maintained action available