StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

nowsecure/nowsecure-action/image

nowsecure/nowsecure-action/image

The NowSecure Action delivers fast, accurate, automated security analysis of iOS and Android apps coded in any language

3/10
skaut/wordpress-version-checker

skaut/wordpress-version-checker

A GitHub action to automatically create issues when a plugin "tested up to" version doesn't match the latest WordPress version.

6/10
microsoft/onnxruntime-github-actions/build-docker-image

microsoft/onnxruntime-github-actions/build-docker-image

Reusable GitHub Actions for ONNX Runtime repos. The actions are used for constructing ONNX Runtime's public pull request pipelines.

4/10
verygoodopensource/very_good_coverage

verygoodopensource/very_good_coverage

GitHub Action which helps enforce code coverage threshold using lcov created by Very Good Ventures ๐Ÿฆ„

0/10
loonghao/vx

loonghao/vx

Universal Development Tool Manager

5/10
Maintained action available
ministryofjustice/devsecops-actions/cruft

ministryofjustice/devsecops-actions/cruft

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

5/10
brianpugh/install-micropython

brianpugh/install-micropython

Github Action to install micropython.

4/10
Maintained action available
yagihash/flutter-fvm-config-action/config

yagihash/flutter-fvm-config-action/config

An action that parses an https://github.com/leoafarias/fvm config file into environment variables which can then be used to configure the https://github.com/subosito/flutter-action.

3/10
runs-on/cache/restore

runs-on/cache/restore

Shockingly faster GitHub Action cache with S3 backend

3/10
homebrew/actions/bump-formulae

homebrew/actions/bump-formulae

๐Ÿš€ Homebrew's GitHub Actions

7/10
launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/public-layout.tsx

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/public-layout.tsx

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

4/10
accenture/autofixture.xunit2.automock/.github/actions/materialize-signing-key

accenture/autofixture.xunit2.automock/.github/actions/materialize-signing-key

Autofixture auto-mocking for XUnit2 using a mocking library of your choice.

8/10
sredevopsorg/nhost/.github/actions/image

sredevopsorg/nhost/.github/actions/image

The Open Source Firebase Alternative with GraphQL.

0/10
ministryofjustice/laa-submit-a-bulk-claim/.github/actions/get_release_name

ministryofjustice/laa-submit-a-bulk-claim/.github/actions/get_release_name

Web application for bulk upload of claims data

8/10
kong/slsa-github-generator/.github/actions/image

kong/slsa-github-generator/.github/actions/image

Language-agnostic SLSA provenance generation for Github Actions

3/10
tempoxyz/gh-actions/vendor/depot/setup-action

tempoxyz/gh-actions/vendor/depot/setup-action

Reusable GitHub Actions for Tempo

4/10
Maintained action available
harekrishnarai/flowlyt

harekrishnarai/flowlyt

Flowlyt is a security analyzer that scans GitHub Actions workflows to detect malicious patterns, misconfigurations, and secrets exposure, helping enforce secure CI/CD practices.

6/10
step-security/publish-to-bcr

step-security/publish-to-bcr

GitHub release automation for publishing modules to the Bazel Central Registry. Secure drop-in replacement for bazel-contrib/publish-to-bcr.

8/10
Maintained by StepSecurity
thatisuday/go-cross-build

thatisuday/go-cross-build

GitHub Action to build Go (Golang) modules.

2/10
step-integration-tests/auto-pdpr-test-93275-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-93275-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10