StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

plettich/action-codespell

plettich/action-codespell

Run codespell with reviewdog

3/10
actions-rs/cargo

actions-rs/cargo

๐Ÿ“ฆ GitHub Action for Rust `cargo` command

3/10
step-security/setup-nuget/__builder_checkout_dir__/.github/actions/image

step-security/setup-nuget/__builder_checkout_dir__/.github/actions/image

Secure drop-in replacement for nuget/setup-nuget.

9/10
lucassabreu/comment-coverage-clover

lucassabreu/comment-coverage-clover

Github Action that automatically adds a comment with a summary of coverage reports (clover)

2/10
Maintained action available
bluwy/release-for-reddit-action

bluwy/release-for-reddit-action

๐Ÿš€๏ธ Submit a Reddit post about your release in GitHub Actions

3/10
crs-k/stale-branches

crs-k/stale-branches

Finds and deletes stale branches

4/10
Maintained action available
mario-sangar/upload-s3-action

mario-sangar/upload-s3-action

github action for upload to S3 โ˜๏ธ

1/10
smartcontractkit/.github/actions/ctf-run-tests

smartcontractkit/.github/actions/ctf-run-tests

reusable GHA workflows and actions

5/10
Maintained action available
asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-brand-name.svg

asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-brand-name.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10
reviewdog/action-actionlint

reviewdog/action-actionlint

run actionlint with reviewdog

7/10
sendgrid/dx-automator/actions/release

sendgrid/dx-automator/actions/release

A tool for managing priorities across multiple GitHub repositories

3/10
3shapeinternal/pr-labeler2-action

3shapeinternal/pr-labeler2-action

The GitHub action which sets the labels on Pull Requests depending on their content

3/10
sgammon/hashlock

sgammon/hashlock

Library, CLI, and GitHub Action for verifying hashes

4/10
pb33f/vacuum-action

pb33f/vacuum-action

The official GitHub action for vacuum, OpenAPI linter

3/10
bryan-roe/aria/.github/actions/validate-workflow-yaml

bryan-roe/aria/.github/actions/validate-workflow-yaml

Aria: An Automatic AI system designed to innovate and simplify tasks with intelligence. Explore cutting-edge artificial intelligence in Python.

6/10
atlassian/gajira-find-issue-key

atlassian/gajira-find-issue-key

1/10
pytorch/vision/test-infra/.github/actions/setup-miniconda

pytorch/vision/test-infra/.github/actions/setup-miniconda

Datasets, Transforms and Models specific to Computer Vision

4/10
Maintained action available
launchdarkly/ruby-eventsource/.github/actions/ci

launchdarkly/ruby-eventsource/.github/actions/ci

Server-Sent Events client for Ruby

5/10
philips-software/amp-devcontainer/.github/actions/generate-tool-inventory

philips-software/amp-devcontainer/.github/actions/generate-tool-inventory

๐Ÿ”‹amp-devcontainer is a batteries-included devcontainer useable for modern software development

7/10
yonasbsd/iggy/.github/actions/go/%5c%5c%5c%22https%3a/trendshift.io/repositories/14204%5c%5c%5c%22

yonasbsd/iggy/.github/actions/go/%5c%5c%5c%22https%3a/trendshift.io/repositories/14204%5c%5c%5c%22

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

3/10
Maintained action available