StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

caffeelake/dify/.github/actions/public-layout.tsx

caffeelake/dify/.github/actions/public-layout.tsx

Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting you quickly go from prototype to production.

4/10
Maintained action available
johnabell/absinthe_field_telemetry

johnabell/absinthe_field_telemetry

A library for analysing absinthe GraphQL runtime usage

3/10
launchdarkly/gh-actions/actions/release-secrets

launchdarkly/gh-actions/actions/release-secrets

LaunchDarkly shared GitHub Actions and Workflows

6/10
sonarsource/release-github-actions/create-integration-ticket

sonarsource/release-github-actions/create-integration-ticket

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

5/10
Maintained action available
actionshub/dco

actionshub/dco

5/10
ivuorinen/actions/codeql-analysis

ivuorinen/actions/codeql-analysis

a collection of reusable GitHub Actions designed to streamline CI/CD processes and ensure code quality

7/10
coveo/stew

coveo/stew

Complete Python CI/CD solution built around Poetry.

5/10
Maintained action available
grafana/mimir-loki/lib/actions/public-layout.tsx

grafana/mimir-loki/lib/actions/public-layout.tsx

Like Prometheus, but for logs.

0/10
abcxyz/pkg/.github/actions/fill

abcxyz/pkg/.github/actions/fill

Common tools and libraries for abcxyz projects.

4/10
linode/karpenter-provider-linode/.github/actions/e2e

linode/karpenter-provider-linode/.github/actions/e2e

Linode Karpenter provider

7/10
appetizeio/github-action-appetize

appetizeio/github-action-appetize

Github Action to facilitate interaction with the Appetize.io API

6/10
posthog/posthog/.github/actions/paths-filter

posthog/posthog/.github/actions/paths-filter

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools โ€“ AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more โ€“ capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10
Maintained action available
step-security/harden-runner

step-security/harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

8/10
bitwarden/gh-actions/version-bump

bitwarden/gh-actions/version-bump

Bitwarden-utilized GitHub Actions.

6/10
ultralytics/actions/setup-uv

ultralytics/actions/setup-uv

Ultralytics GitHub Actions for formatting, PR reviews, labeling, CI retries, CLA checks, and dependency updates.

5/10
Maintained action available
ambilykk/copilot-metrics-retention

ambilykk/copilot-metrics-retention

The Copilot Metrics API supplies data spanning a 28-day timeframe. This Action is designed to persistently store this data over time in a JSON file format.

2/10
step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256

step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
step-security/action-size/__builder_checkout_dir__/.github/actions/privacy-check

step-security/action-size/__builder_checkout_dir__/.github/actions/privacy-check

๐Ÿ“ GitHub Action to determine a label to be added based on PR's size. Secure drop-in replacement for actions-ecosystem/action-size.

8/10
tempoxyz/gh-actions/actions/setup-terraform

tempoxyz/gh-actions/actions/setup-terraform

Reusable GitHub Actions for Tempo

4/10
Maintained action available
anchore/binny/.github/actions/bootstrap

anchore/binny/.github/actions/bootstrap

Manage a directory of binaries without a package manager

6/10