StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

secureblue/approvals-action

secureblue/approvals-action

An action to require approvals from permissionless approvers

0/10
yonasbsd/aws-lc/.github/actions/configure-aws-credentials

yonasbsd/aws-lc/.github/actions/configure-aws-credentials

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It ั–s based on code from the Google BoringSSL project and the OpenSSL project.

0/10
runs-on/action/.github/actions/use-dist

runs-on/action/.github/actions/use-dist

The official RunsOn action

5/10
Maintained action available
ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts

ministryofjustice/hmpps-github-shared-actions/.github/actions/security_veracode_prepare_artifacts

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment

nvidia/bare-metal-manager-core/.github/actions/setup-mkosi-environment

NVIDIA Infra Controller - Hardware Lifecycle Management and multitenant networking

5/10
Maintained action available
hoprnet/hopr-workflows/actions/release-version

hoprnet/hopr-workflows/actions/release-version

GitHub workflows helping HOPR automate tasks via actions

6/10
step-integration-tests/auto-pdpr-test-58684-5/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-58684-5/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
jahid11978/clawsweeper/clawsweeper/.github/actions/setup-codex

jahid11978/clawsweeper/clawsweeper/.github/actions/setup-codex

ClawSweeper scans all issues and PRs and suggest what we can close, and why. It runs every PR / Issue once a week.

5/10
Maintained action available
step-integration-tests/auto-pdpr-test-25805-8/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-25805-8/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
juliangruber/sleep-action

juliangruber/sleep-action

Sleep for a set period of time

0/10
step-integration-tests/auto-pdpr-test-62903-8/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-62903-8/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
dmptrluke/django-fetch-metadata/.github/.tmp/.generated-actions/image

dmptrluke/django-fetch-metadata/.github/.tmp/.generated-actions/image

Resource isolation policy for Django using Fetch Metadata request headers

3/10
step-security/python-coverage-comment-action

step-security/python-coverage-comment-action

Publish coverage report as PR comment, and create a coverage badge & dashboard to display on the Readme for Python projects, all inside GitHub without third party servers. Secure drop-in replacement for py-cov-action/python-coverage-comment-action.

10/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-33716-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-33716-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/buck2/.github/actions/init_opam

yonasbsd/buck2/.github/actions/init_opam

Build system, successor to Buck

2/10
openzeppelin/openzeppelin-upgrades/.github/actions/setup

openzeppelin/openzeppelin-upgrades/.github/actions/setup

Plugins for Hardhat and Foundry to deploy and manage upgradeable contracts on Ethereum.

2/10
Maintained action available
royaloughtness/secureblue-dev/.github/workflows/shared-runner-setup

royaloughtness/secureblue-dev/.github/workflows/shared-runner-setup

Hardened Fedora Atomic and Fedora CoreOS images

5/10
nvidia/model-optimizer/.github/actions/public-layout.tsx

nvidia/model-optimizer/.github/actions/public-layout.tsx

A unified library of SOTA model optimization techniques like quantization, distillation, pruning, neural architecture search, speculative decoding, etc. It compresses deep learning models for downstream deployment frameworks like TensorRT-LLM, TensorRT, vLLM, etc. to optimize inference speed.

6/10
dawidd6/action-ansible-playbook

dawidd6/action-ansible-playbook

:gear: GitHub Action for running Ansible playbooks

5/10
Maintained action available
solana-developers/github-actions/extract-versions

solana-developers/github-actions/extract-versions

A collection of github actions to build, idl upload and verify programs. With Squads support

3/10
Maintained action available