StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

projectdiscovery/actions/golangci-lint/fill

projectdiscovery/actions/golangci-lint/fill

ProjectDiscovery's Composite Actions

6/10
burningalchemist/action-gh-nfpm

burningalchemist/action-gh-nfpm

nFPM Packager action

2/10
rapidsai/sccache/.github/actions/artifact_failure

rapidsai/sccache/.github/actions/artifact_failure

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

5/10
Maintained action available
tomhjp/gh-action-jira-comment

tomhjp/gh-action-jira-comment

Add a comment to a Jira issue using GitHub actions

0/10
intheclouddan/publish-vscode-extension

intheclouddan/publish-vscode-extension

GitHub action to publish your VS Code Extension to the Open VSX Registry or Visual Studio Marketplace.

2/10
step-integration-tests/auto-pdpr-test-56791-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-56791-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
zephyrproject-rtos/action-first-interaction

zephyrproject-rtos/action-first-interaction

An action for filtering pull requests and issues from first-time contributors

4/10
pozetroninc/github-action-get-latest-release

pozetroninc/github-action-get-latest-release

A Github action to get the latest release from another repository.

4/10
nvidia/kata-containers/.github/cargo-deny-composite-action

nvidia/kata-containers/.github/cargo-deny-composite-action

Kata containers is an implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.

5/10
Maintained action available
rodri-oliveira-dev/poc-arquitetura/.github/actions/setup-dotnet

rodri-oliveira-dev/poc-arquitetura/.github/actions/setup-dotnet

.NET architecture PoC for distributed services with CQRS, Kafka, PostgreSQL, Outbox, DLQ, observability and CI quality gates.

6/10
yonasbsd/opendal/.github/actions/fuzz_test

yonasbsd/opendal/.github/actions/fuzz_test

Apache OpenDAL: access data freely.

3/10
kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-upload-artifact

kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-upload-artifact

Language-agnostic SLSA provenance generation for Github Actions

3/10
ledgerhq/ledger-live/tools/actions/composites/cache/download

ledgerhq/ledger-live/tools/actions/composites/cache/download

Mono-repository for Ledger Wallet apps and related packages

4/10
Maintained action available
sonarsource/release-github-actions/get-release-version

sonarsource/release-github-actions/get-release-version

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10
launchdarkly/ruby-server-sdk/.github/actions/check

launchdarkly/ruby-server-sdk/.github/actions/check

LaunchDarkly Server-side SDK for Ruby

5/10
Maintained action available
hiero-ledger/hiero-ethereum-execution-spec-tests/.github/actions/build-evm-client/geth

hiero-ledger/hiero-ethereum-execution-spec-tests/.github/actions/build-evm-client/geth

Specification for the Execution Layer. Tracking network upgrades.

7/10
aquanow/usdu-smart-contracts/.github/actions/hardhat-setup

aquanow/usdu-smart-contracts/.github/actions/hardhat-setup

Source repository for the smart contracts powering the USD-backed stablecoin issued by Universal Digital Intl Limited (โ€œUniversalโ€).

4/10
step-integration-tests/auto-pdpr-test-74755-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-74755-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
fortify/github-action/without-artifacts

fortify/github-action/without-artifacts

Fortify GitHub Actions

1/10
dustin4444/metamask-mobile/.github/actions/smart-e2e-selection

dustin4444/metamask-mobile/.github/actions/smart-e2e-selection

Mobile web browser providing access to websites that use the Ethereum blockchain

2/10