StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

nvidia/nodewright/.github/actions/cosign-verify-release

nvidia/nodewright/.github/actions/cosign-verify-release

A Kubernetes Operator to manage Node OS customizations.

7/10
kong/changed-files/dir1

kong/changed-files/dir1

fork of changed files git action at a known good commit

4/10
marko-k0/ic/.github/actions/bazel

marko-k0/ic/.github/actions/bazel

Internet Computer blockchain source: the client/replica software run by nodes

2/10
surrealdb/rocksdb/.github/actions/install-maven

surrealdb/rocksdb/.github/actions/install-maven

A library that provides an embeddable, persistent key-value store for fast storage.

4/10
canonical/setup-lxd

canonical/setup-lxd

A GitHub Action to install & configure LXD on a runner.

4/10
freshaengineering/merge-gatekeeper

freshaengineering/merge-gatekeeper

[DevEx] PR merge control - Branch protection enhancement, merge requirements validation, status check aggregation. | TypeScript, GitHub Actions

4/10
Maintained action available
rapidsai/pre-commit-hooks/.github/actions/earliest-python-version

rapidsai/pre-commit-hooks/.github/actions/earliest-python-version

8/10
step-security/devcontainers-ci

step-security/devcontainers-ci

A GitHub Action and Azure DevOps Task designed to simplify using Dev Containers (https://containers.dev) in CI/CD systems. Secure drop-in replacement for devcontainers/ci.

8/10
Maintained by StepSecurity
jenkins-infra/jenkins-maven-cd-action

jenkins-infra/jenkins-maven-cd-action

3/10
step-security/paths-filter/__builder_checkout_dir__/.github/actions/privacy-check

step-security/paths-filter/__builder_checkout_dir__/.github/actions/privacy-check

Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter.

9/10
chad-golden/setup-wpr/stop

chad-golden/setup-wpr/stop

A GitHub Action that simplifies recording Windows performance traces using Windows Performance Recorder

3/10
nvidia/kai-scheduler/.github/actions/setup-e2e-cluster

nvidia/kai-scheduler/.github/actions/setup-e2e-cluster

KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale

7/10
step-security/gha-jobid-action/.github/actions/gha-jobid-action

step-security/gha-jobid-action/.github/actions/gha-jobid-action

โš™๏ธ GitHub Action to get the current workflow run's Job URL and ID. Secure drop-in replacement for Tiryoh/gha-jobid-action.

10/10
tlylt/install-graphviz

tlylt/install-graphviz

Install Graphviz in your GitHub Actions workflow cross-platform

3/10
step-security/protobuf-ci/public-layout.tsx

step-security/protobuf-ci/public-layout.tsx

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
yonasbsd/navidrome/.github/actions/prepare-docker

yonasbsd/navidrome/.github/actions/prepare-docker

๐ŸŽงโ˜๏ธ Modern Music Server and Streamer compatible with Subsonic/Airsonic

3/10
Maintained action available
oxsecurity/megalinter/flavors/documentation

oxsecurity/megalinter/flavors/documentation

๐Ÿฆ™ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10
tj-actions/git-cliff

tj-actions/git-cliff

:octocat: Github action to run git-cliff with a custom cliff.toml

4/10
step-security/terraform-min-max/__builder_checkout_dir__/.github/actions/privacy-check

step-security/terraform-min-max/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action used to evaluate the Terraform minimum and maximum versions permitted. Secure drop-in replacement for clowdhaus/terraform-min-max.

10/10
celo-org/optimism/.github/actions/docker-build-prep

celo-org/optimism/.github/actions/docker-build-prep

Optimism is Ethereum, scaled.

5/10
Maintained action available