StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-cleanup

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-cleanup

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

5/10
yonasbsd/authentik/.github/actions/test-results

yonasbsd/authentik/.github/actions/test-results

The authentication glue you need.

4/10
Maintained action available
step-security/docker-build-push-action/_next/static/chunks/97904-01f2134615e51508.js

step-security/docker-build-push-action/_next/static/chunks/97904-01f2134615e51508.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10
4cloudguru/shared-workflows/.github/actions/verify-vsix-signature

4cloudguru/shared-workflows/.github/actions/verify-vsix-signature

Reusable GitHub Actions workflows shared across the Terraform suite and pipeline-task families. Public so repos in both sethbacon/ and 4cloudguru/ can call them.

3/10
step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/image

step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/image

๐Ÿ› ๏ธ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.

10/10
steipete/run-testbox

steipete/run-testbox

2/10
polasudo/rhdh/.github/actions/check-image-and-changes

polasudo/rhdh/.github/actions/check-image-and-changes

The repo formerly known as janus-idp/backstage-showcase

2/10
servicenow/sncicd-publish-app

servicenow/sncicd-publish-app

2/10
aerospike/aerospike-client-nodejs/.github/actions/update-version

aerospike/aerospike-client-nodejs/.github/actions/update-version

Node.js client for the Aerospike database

4/10
pr-annotators/mypy-pr-annotator

pr-annotators/mypy-pr-annotator

Annotate pull requests with mypy errors detected during CI

3/10
step-integration-tests/auto-pdpr-test-87628-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-87628-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
vendic/github-actions-setup-opensearch

vendic/github-actions-setup-opensearch

An action for OpenSearch

3/10
goreleaser/goreleaser-action

goreleaser/goreleaser-action

GitHub Action for GoReleaser

7/10
vexxhost/docker-atmosphere/.github/actions/public-layout.tsx

vexxhost/docker-atmosphere/.github/actions/public-layout.tsx

Reusable GitHub Actions for building Atmosphere Docker images

4/10
Maintained action available
threeal/cmake-action

threeal/cmake-action

Configure and build CMake projects on GitHub Actions

5/10
Maintained action available
sonatype/actions

sonatype/actions

Public repository to keep Sonatype's GitHub Actions.

3/10
nvidia/nemoclaw/.trusted-hermes-resolver/.github/actions/resolve-reviewed-hermes-platform

nvidia/nemoclaw/.trusted-hermes-resolver/.github/actions/resolve-reviewed-hermes-platform

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
akashchi/download-artifact

akashchi/download-artifact

2/10
shovon0203/docker-action

shovon0203/docker-action

2/10
step-security/setup-buildx-action/_next/static/chunks/polyfills-42372ed130431b0a.js

step-security/setup-buildx-action/_next/static/chunks/polyfills-42372ed130431b0a.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

9/10