StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

envoyproxy/toolshed/actions/github/checkout

envoyproxy/toolshed/actions/github/checkout

7/10
yonasbsd/testcontainers-node/.github/actions/rancher-desktop-setup

yonasbsd/testcontainers-node/.github/actions/rancher-desktop-setup

Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

4/10
Maintained action available
mikehardy/buildcache-action

mikehardy/buildcache-action

GitHub Action to install and configure buildcache for faster compilation

3/10
qodo-ai/pr-agent

qodo-ai/pr-agent

๐Ÿš€ PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.

7/10
lhotari/action-upterm

lhotari/action-upterm

Debug your GitHub Actions via SSH by using upterm/tmux to get access to the runner system itself.

5/10
crystal-lang/install-crystal

crystal-lang/install-crystal

GitHub Action: Install Crystal programming language

4/10
yonasbsd/libsignal/.github/actions/restore-cargo-cache

yonasbsd/libsignal/.github/actions/restore-cargo-cache

Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible.

5/10
Maintained action available
chainguard-actions/peter-evans-create-pull-request

chainguard-actions/peter-evans-create-pull-request

3/10
Maintained action available
nimbus-agent/.github/actions/fill

nimbus-agent/.github/actions/fill

Org profile & shared community-health defaults for Nimbus

4/10
step-security/actions-rs-toolchain

step-security/actions-rs-toolchain

๐Ÿ› ๏ธ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.

8/10
Maintained by StepSecurity
step-security/conventional-changelog-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/conventional-changelog-action/__builder_checkout_dir__/.github/actions/privacy-check

Github Action that generates a changelog with the Conventional Changelog CLI. Secure drop-in replacement for TriPSs/conventional-changelog-action.

8/10
anbiona/gale/.github/workflows/runner-setup

anbiona/gale/.github/workflows/runner-setup

Hardened personal server based on secureblue.

6/10
dolthub/label-customer-issues

dolthub/label-customer-issues

A GitHub Action to apply a label to issues and PRs created by authors who are not members of the team that owns a repo.

3/10
pytorch/test-infra/.github/actions/teardown-linux

pytorch/test-infra/.github/actions/teardown-linux

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

4/10
Maintained action available
datadog/integrations-core/.github/actions/setup-test-target-scripts

datadog/integrations-core/.github/actions/setup-test-target-scripts

Core integrations of the Datadog Agent

4/10
Maintained action available
smartcontractkit/.github/actions/ctf-check-mod-version

smartcontractkit/.github/actions/ctf-check-mod-version

reusable GHA workflows and actions

5/10
Maintained action available
caffeelake/llvm-project/workflows-main/.github/workflows/release-binaries-setup-stage

caffeelake/llvm-project/workflows-main/.github/workflows/release-binaries-setup-stage

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

3/10
Maintained action available
tannergolden/standards/actions/apply-settings

tannergolden/standards/actions/apply-settings

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, scanning, releases, and a shared label taxonomy.

5/10
anolilab/workflows/step/setup

anolilab/workflows/step/setup

Shared Github Actions for Node.js projects and Monorepos.

5/10
Maintained action available
nvidia/nodewright/.github/actions/cosign-verify-release

nvidia/nodewright/.github/actions/cosign-verify-release

A Kubernetes Operator to manage Node OS customizations.

7/10