StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/asdf-vm-actions/image

step-security/asdf-vm-actions/image

GitHub Actions for the asdf version manager. Secure drop-in replacement for asdf-vm/actions.

10/10
anchore/go-homedir/.github/actions/public-layout.tsx

anchore/go-homedir/.github/actions/public-layout.tsx

Go library for detecting and expanding the user's home directory without cgo.

7/10
paketo-buildpacks/github-config/actions/issue/add-to-project

paketo-buildpacks/github-config/actions/issue/add-to-project

Common repository configuration

6/10
cdatehortuab/github-action-push-to-another-repository

cdatehortuab/github-action-push-to-another-repository

github Action to push files into another Github repository

3/10
equinor/action-checkstyle

equinor/action-checkstyle

Fork of the original action to run Checkstyle on your Java code.

7/10
andife/openvino/openvino/.github/actions/image

andife/openvino/openvino/.github/actions/image

OpenVINOβ„’ is an open source toolkit for optimizing and deploying AI inference

3/10
step-integration-tests/auto-pdpr-test-88355-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88355-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
cpcloud/numba-cuda/.github/actions/install_unix_deps

cpcloud/numba-cuda/.github/actions/install_unix_deps

The CUDA target for Numba

3/10
zeebe-io/backport-action

zeebe-io/backport-action

Fast and flexible GitHub action to cherry-pick merged pull requests to selected branches

6/10
step-security/pull-request-comment-trigger/__builder_checkout_dir__/.github/actions/privacy-check

step-security/pull-request-comment-trigger/__builder_checkout_dir__/.github/actions/privacy-check

A github action for detecting a "trigger" in a pull request description or comment. Secure drop-in replacement for Khan/pull-request-comment-trigger.

8/10
xarray-contrib/issue-from-pytest-log

xarray-contrib/issue-from-pytest-log

create issues from pytest-reportlog files

6/10
bazelbuild/continuous-integration/actions/bcr-pr-reviewer

bazelbuild/continuous-integration/actions/bcr-pr-reviewer

Bazel's Continuous Integration Setup

6/10
boneskull/gh-stack/.github/actions/claude-code-review

boneskull/gh-stack/.github/actions/claude-code-review

A GitHub CLI extension for managing stacked pull requests.

4/10
Maintained action available
actions/cache/fill

actions/cache/fill

Cache dependencies and build outputs in GitHub Actions

5/10
Maintained action available
coveord/snowpark-java-scala/jira/gajira-issue-update

coveord/snowpark-java-scala/jira/gajira-issue-update

Snowflake Snowpark Java & Scala API

3/10
gradle/actions/dependency-submission

gradle/actions/dependency-submission

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

6/10
sonarsource/release-github-actions/sonar-update-center-release

sonarsource/release-github-actions/sonar-update-center-release

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10
mitoma/sver-actions/exec

mitoma/sver-actions/exec

GitHub Actions for sver

5/10
Maintained action available
git-hub-chris/visualstudiocode/actions/locker

git-hub-chris/visualstudiocode/actions/locker

Microsoft Visual Studio Code.

6/10
wei/wget

wei/wget

Wraps the wget CLI to be used in Github Actions

3/10