StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

christian-draeger/read-properties

christian-draeger/read-properties

Github action to read java properties files

5/10
montyd/package-json-updated-action

montyd/package-json-updated-action

A GitHub Action which indicates when the package.json version has updated in the most recent commit

2/10
lfreleng-actions/python-project-name-action

lfreleng-actions/python-project-name-action

Extracts Python project name and derives the package name

8/10
intel/cve-bin-tool-action

intel/cve-bin-tool-action

Known vulnerability scanning for your GitHub repository using CVE Binary Tool. This Action can scan binaries, component lists and SBOMs for known vulnerabilities and CVEs. It can generate SBOM component lists as well as reports in the Security Tab and in HTML/JSON/PDF format.

0/10
amartyajha/airbyte/.github/actions/match-github-to-slack-user

amartyajha/airbyte/.github/actions/match-github-to-slack-user

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

0/10
yonasbsd/wazuh/.github/actions/indexer_connector_deps

yonasbsd/wazuh/.github/actions/indexer_connector_deps

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10
Maintained action available
vendic/magento2-clean-cron-schedule/.github/actions/setup

vendic/magento2-clean-cron-schedule/.github/actions/setup

Magento 2 module - auto clean cron schedule table

3/10
nvidia-nemo/fw-ci-templates/.github/actions/check-imports

nvidia-nemo/fw-ci-templates/.github/actions/check-imports

CI/CD templates for NeMo-FW libraries

7/10
posthog/posthog-roblox/.github/actions/setup-rokit

posthog/posthog-roblox/.github/actions/setup-rokit

PostHog Roblox SDK

8/10
nvidia/nodewright/.github/actions/resolve-oci-digest

nvidia/nodewright/.github/actions/resolve-oci-digest

A Kubernetes Operator to manage Node OS customizations.

7/10
codota/delete-tag-and-release

codota/delete-tag-and-release

0/10
rasahq/pr-changed-files-filter/somewhere

rasahq/pr-changed-files-filter/somewhere

Github Action to check which files are changed in a pull request

2/10
sasobadovinac/mfem/.github/actions/sanitize/image

sasobadovinac/mfem/.github/actions/sanitize/image

Lightweight, general, scalable C++ library for finite element methods

3/10
rapidsai/velox-testing/.github/actions/delete-arch-tags

rapidsai/velox-testing/.github/actions/delete-arch-tags

7/10
openai/fence/target/action-layout/owner/project/revision

openai/fence/target/action-layout/owner/project/revision

A fence keeps things out, but also in. This project is still in early, and active development.

6/10
approved-3rd-party-actions/render-template

approved-3rd-party-actions/render-template

GitHub Action to render file based on template and passed variables

3/10
tempoxyz/export-tempo/.github/actions/install-dependencies

tempoxyz/export-tempo/.github/actions/install-dependencies

4/10
step-security/clippy-action

step-security/clippy-action

๐Ÿปโ€โ„๏ธ๐Ÿ“ฆ GitHub action to run Clippy, an up-to-date and modern version of actions-rs/clippy. Secure drop-in replacement for auguwu/clippy-action.

8/10
Maintained by StepSecurity
sonarsource/sonar-scanner-azdo/.actions/get-build-number

sonarsource/sonar-scanner-azdo/.actions/get-build-number

Sonar Azure DevOps Services Extensions

6/10
matheusandre1/kroxylicious/.github/actions/common/setup-minikube

matheusandre1/kroxylicious/.github/actions/common/setup-minikube

Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ

2/10