StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts

ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment

nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment

NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking

5/10
Maintained action available
hoprnet/hopr-workflows/actions/release-version

hoprnet/hopr-workflows/actions/release-version

GitHub workflows helping HOPR automate tasks via actions

6/10
jahid11978/clawsweeper/clawsweeper/.github/actions/setup-codex

jahid11978/clawsweeper/clawsweeper/.github/actions/setup-codex

ClawSweeper scans all issues and PRs and suggest what we can close, and why. It runs every PR / Issue once a week.

5/10
Maintained action available
juliangruber/sleep-action

juliangruber/sleep-action

Sleep for a set period of time

0/10
dmptrluke/django-fetch-metadata/.github/.tmp/.generated-actions/image

dmptrluke/django-fetch-metadata/.github/.tmp/.generated-actions/image

Resource isolation policy for Django using Fetch Metadata request headers

3/10
step-security/python-coverage-comment-action

step-security/python-coverage-comment-action

Publish coverage report as PR comment, and create a coverage badge & dashboard to display on the Readme for Python projects, all inside GitHub without third party servers. Secure drop-in replacement for py-cov-action/python-coverage-comment-action.

10/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-33716-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-33716-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/buck2/.github/actions/init_opam

yonasbsd/buck2/.github/actions/init_opam

Build system, successor to Buck

3/10
Maintained action available
openzeppelin/openzeppelin-upgrades/.github/actions/setup

openzeppelin/openzeppelin-upgrades/.github/actions/setup

Plugins for Hardhat and Foundry to deploy and manage upgradeable contracts on Ethereum.

2/10
royaloughtness/secureblue-dev/.github/workflows/shared-runner-setup

royaloughtness/secureblue-dev/.github/workflows/shared-runner-setup

Hardened Fedora Atomic and Fedora CoreOS images

5/10
nvidia/model-optimizer/.github/actions/public-layout.tsx

nvidia/model-optimizer/.github/actions/public-layout.tsx

A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.

7/10
dawidd6/action-ansible-playbook

dawidd6/action-ansible-playbook

:gear: GitHub Action for running Ansible playbooks

5/10
solana-developers/github-actions/extract-versions

solana-developers/github-actions/extract-versions

A collection of github actions to build, idl upload and verify programs. With Squads support

4/10
Maintained action available
approved-3rd-party-actions/upload-mobile-app-github-action

approved-3rd-party-actions/upload-mobile-app-github-action

The Github action to upload an mobile app file to Kobiton Apps Repo

3/10
sonarsource/sonar-update-center/gh-action_release/main

sonarsource/sonar-update-center/gh-action_release/main

5/10
Maintained action available
actions/setup-java/v4.7.1

actions/setup-java/v4.7.1

Set up your GitHub Actions workflow with a specific version of Java

6/10
officedev/teamsfx-cli-action

officedev/teamsfx-cli-action

teasmfx CI/CD action

0/10
step-security/gh-setup/__builder_checkout_dir__/.github/actions/privacy-check

step-security/gh-setup/__builder_checkout_dir__/.github/actions/privacy-check

:octocat: Setup asset of Github releases. Secure drop-in replacement for k1LoW/gh-setup.

10/10
aquasecurity/tfsec-pr-commenter-action

aquasecurity/tfsec-pr-commenter-action

Add comments to pull requests where tfsec checks have failed

4/10