StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

codecov/codecov-action

codecov/codecov-action

GitHub Action that uploads coverage to Codecov :open_umbrella:

8/10
azure/get-keyvault-secrets

azure/get-keyvault-secrets

Automate your GitHub workflows using Azure Action for Key Vault

0/10
softprops/action-gh-release/_next/static/chunks/14233-9c198ef6720a7bc6.js

softprops/action-gh-release/_next/static/chunks/14233-9c198ef6720a7bc6.js

📦 :octocat: GitHub Action for creating GitHub Releases

5/10
Maintained action available
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/experience

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/experience

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
uraimo/run-on-arch-action

uraimo/run-on-arch-action

A Github Action that executes jobs/commands on non-x86 cpu architectures (ARMv6, ARMv7, aarch64, s390x, ppc64le, riscv64) via QEMU

6/10
nvidia/model-optimizer/.github/actions/fill

nvidia/model-optimizer/.github/actions/fill

A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.

7/10
fermyon/actions/spin/deploy

fermyon/actions/spin/deploy

4/10
step-security/the-actions-org-workflow-dispatch

step-security/the-actions-org-workflow-dispatch

A GitHub Action for triggering workflows, using the `workflow_dispatch` event. Secure drop-in replacement for the-actions-org/workflow-dispatch.

10/10
Maintained by StepSecurity
rapidsai/devcontainers/.github/actions/build-windows-image

rapidsai/devcontainers/.github/actions/build-windows-image

5/10
Maintained action available
ministryofjustice/payforlegalaid/.github/snyk-scan

ministryofjustice/payforlegalaid/.github/snyk-scan

8/10
fossifyorg/.github/.github/actions/cleanup-secrets

fossifyorg/.github/.github/actions/cleanup-secrets

6/10
oaslananka/_ops/.github/actions/upload-ops-artifact

oaslananka/_ops/.github/actions/upload-ops-artifact

Repository operations control plane for CI/CD, automation, release orchestration, audit, and mirror management.

2/10
zarf-dev/setup-zarf

zarf-dev/setup-zarf

GitHub Action for Installing and Configuring Zarf

5/10
nosense588/spring-boot/.github/actions/build

nosense588/spring-boot/.github/actions/build

Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.

2/10
crazy-max/ghaction-chocolatey

crazy-max/ghaction-chocolatey

GitHub Action for Chocolatey, the package manager for Windows

5/10
Maintained action available
zephyrproject-rtos/action_scancode

zephyrproject-rtos/action_scancode

3/10
redhat-developer/rhdh-plugin-export-utils/export-dynamic

redhat-developer/rhdh-plugin-export-utils/export-dynamic

Utilities for exporting backstage plugins as dynamic plugins for installation in Red Hat Developer Hub

6/10
nvidia-nemo/labs-voice-agent/.github/actions/test-template

nvidia-nemo/labs-voice-agent/.github/actions/test-template

A fully opensource framework for building and evaluating voice agents with open models.

8/10
step-security/backport-github-action

step-security/backport-github-action

Backport CLI tool as a Github Action. Secure drop-in replacement for sorenlouv/backport-github-action.

10/10
Maintained by StepSecurity
agslima/app-stayhealthy-pipeline/.github/actions/validate-promotion

agslima/app-stayhealthy-pipeline/.github/actions/validate-promotion

Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.

6/10