StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sorah/mairu/.github/actions/setup

sorah/mairu/.github/actions/setup

On-memory AWS credentials agent and executor for IAM Identity Center (AWS SSO) and custom servers

4/10
09168806659/metaplex-program-library/.github/actions/verify-rust

09168806659/metaplex-program-library/.github/actions/verify-rust

Smart contracts maintained by the Metaplex team

2/10
adrise/connectedhomeip/.github/actions/add-ipv6

adrise/connectedhomeip/.github/actions/add-ipv6

Fork of project-chip/connectedhomeip

3/10
reality2byte/codeql-action/.github/actions/prepare-test

reality2byte/codeql-action/.github/actions/prepare-test

Actions for running CodeQL analysis

6/10
bitwarden/gh-actions/download-artifacts

bitwarden/gh-actions/download-artifacts

Bitwarden-utilized GitHub Actions.

6/10
ledgerhq/ledger-live/tools/actions/desktop-report-build

ledgerhq/ledger-live/tools/actions/desktop-report-build

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10
Maintained action available
docker/bake-action/%3c/script%3e%3ckww3f2%3e/list-targets

docker/bake-action/%3c/script%3e%3ckww3f2%3e/list-targets

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
launchdarkly/swift-eventsource/.github/actions/publish-docs

launchdarkly/swift-eventsource/.github/actions/publish-docs

Server-sent events (SSE) client implementation in Swift for iOS, macOS, tvOS, and watchOS

5/10
step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/image

step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/image

A GitHub action that installs or updates the gh CLI. Secure drop-in replacement for sersoft-gmbh/setup-gh-cli-action.

8/10
r0adkll/sign-android-release

r0adkll/sign-android-release

A GitHub action to sign an APK or AAB

4/10
step-security/dependabot-fetch-metadata/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/dependabot-fetch-metadata/__builder_checkout_dir__/.github/actions/secure-download-artifact

Extract information about the dependencies being updated by a Dependabot-generated PR. Secure drop-in replacement for dependabot/fetch-metadata.

10/10
ai-dynamo/dynamo/.github/actions/compliance-scan

ai-dynamo/dynamo/.github/actions/compliance-scan

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
step-security/snyk-actions/iac

step-security/snyk-actions/iac

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
dawidd6/action-send-mail/_next/static/chunks/672f3965-60ab34eb9d3230cd.js

dawidd6/action-send-mail/_next/static/chunks/672f3965-60ab34eb9d3230cd.js

:gear: A GitHub Action to send an email to multiple recipients

5/10
Maintained action available
chainguard-dev/digestabot

chainguard-dev/digestabot

A Github Action to automatically update digests for container images.

8/10
peakoss/anti-slop

peakoss/anti-slop

A GitHub action that detects and automatically closes low-quality and AI slop PRs.

2/10
yonasbsd/ghost/.github/actions/setup-docker-registry-mirrors

yonasbsd/ghost/.github/actions/setup-docker-registry-mirrors

Independent technology for modern publishing, memberships, subscriptions and newsletters.

5/10
Maintained action available
step-security/read-yaml/__builder_checkout_dir__/.github/actions/image

step-security/read-yaml/__builder_checkout_dir__/.github/actions/image

A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.

10/10
sasobadovinac/occt/.github/actions/setup-msys2

sasobadovinac/occt/.github/actions/setup-msys2

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

5/10
Maintained action available
edera-dev/libscap-bindings/.github/actions/install-llvm

edera-dev/libscap-bindings/.github/actions/install-llvm

Rust bindings for Falco's `libscap` eBPF monitoring backend C library

6/10