StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

browserstack/github-actions/setup-local

browserstack/github-actions/setup-local

A collection of GitHub Actions for BrowserStack. For internal reference: https://browserstack.atlassian.net/wiki/spaces/ENG/pages/1750928573/GitHub+Integration+via+GitHub+Actions

5/10
Maintained action available
zizmorcore/zizmor-action

zizmorcore/zizmor-action

Run zizmor from GitHub Actions!

7/10
openjournals/openjournals-draft-action

openjournals/openjournals-draft-action

Experimental GitHub Action

5/10
step-security/git-restore-mtime-action/__builder_checkout_dir__/.github/actions/image

step-security/git-restore-mtime-action/__builder_checkout_dir__/.github/actions/image

A GitHub Workflow Action which restores timestamps of files in the current tree. Secure drop-in replacement for chetan/git-restore-mtime-action.

10/10
google-github-actions/deploy-cloud-functions

google-github-actions/deploy-cloud-functions

A GitHub Action that deploys source code to Google Cloud Functions.

5/10
madrapps/add-reviewers

madrapps/add-reviewers

Github action that add Reviewers to the Pull Request

2/10
tomasreyes/typos

tomasreyes/typos

Source code spell checker

5/10
Maintained action available
derekprior/add-autoresponse

derekprior/add-autoresponse

A GitHub action to add autoresponders to issues and pull requests

3/10
harden-runner-canary/dns-test/.github/actions/dns-config

harden-runner-canary/dns-test/.github/actions/dns-config

2/10
yonasbsd/grafana/.github/actions/setup-enterprise

yonasbsd/grafana/.github/actions/setup-enterprise

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10
Maintained action available
dustin4444/electron/src/electron/.github/actions/build-electron

dustin4444/electron/src/electron/.github/actions/build-electron

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

5/10
Maintained action available
huntridge-labs/argus/.github/actions/parse-zap-config

huntridge-labs/argus/.github/actions/parse-zap-config

Argus brings โ€œa hundred eyesโ€ to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
fortify/github-action/ssc-export

fortify/github-action/ssc-export

Fortify GitHub Actions

2/10
Maintained action available
kong/slsa-generator/.github/actions/detect-workflow-js

kong/slsa-generator/.github/actions/detect-workflow-js

Language-agnostic SLSA provenance generation for Github Actions

3/10
ministryofjustice/money-to-prisoners-transaction-uploader/.github/actions/fill

ministryofjustice/money-to-prisoners-transaction-uploader/.github/actions/fill

Reads Money to Prisoners (MTP) bank account to facilitate reconciliation

8/10
actions/first-interaction

actions/first-interaction

An action for filtering pull requests and issues from first-time contributors

5/10
grafana/grafana/.grafana-main/.github/workflows/actions/changelog

grafana/grafana/.grafana-main/.github/workflows/actions/changelog

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10
vendic/magento2-smile-elasticsuite-disable-tracking/.github/actions/setup

vendic/magento2-smile-elasticsuite-disable-tracking/.github/actions/setup

Disable tracking and telemetry from Smile Elasticsuite and remove tracking.js

2/10
dustin4444/slsa-github-generator/.github/actions/compute-sha256

dustin4444/slsa-github-generator/.github/actions/compute-sha256

Language-agnostic SLSA provenance generation for Github Actions

3/10
plettich/action-codespell

plettich/action-codespell

Run codespell with reviewdog

3/10