StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

bitwarden/gh-actions/download-artifacts

bitwarden/gh-actions/download-artifacts

Bitwarden-utilized GitHub Actions.

6/10
ledgerhq/ledger-live/tools/actions/desktop-report-build

ledgerhq/ledger-live/tools/actions/desktop-report-build

Mono-repository for Ledger Wallet apps and related packages

4/10
Maintained action available
docker/bake-action/%3c/script%3e%3ckww3f2%3e/list-targets

docker/bake-action/%3c/script%3e%3ckww3f2%3e/list-targets

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
launchdarkly/swift-eventsource/.github/actions/publish-docs

launchdarkly/swift-eventsource/.github/actions/publish-docs

Server-sent events (SSE) client implementation in Swift for iOS, macOS, tvOS, and watchOS

4/10
step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/image

step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/image

A GitHub action that installs or updates the gh CLI. Secure drop-in replacement for sersoft-gmbh/setup-gh-cli-action.

10/10
r0adkll/sign-android-release

r0adkll/sign-android-release

A GitHub action to sign an APK or AAB

3/10
step-security/dependabot-fetch-metadata/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/dependabot-fetch-metadata/__builder_checkout_dir__/.github/actions/secure-download-artifact

Extract information about the dependencies being updated by a Dependabot-generated PR. Secure drop-in replacement for dependabot/fetch-metadata.

10/10
ai-dynamo/dynamo/.github/actions/compliance-scan

ai-dynamo/dynamo/.github/actions/compliance-scan

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
step-security/snyk-actions/iac

step-security/snyk-actions/iac

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
dawidd6/action-send-mail/_next/static/chunks/672f3965-60ab34eb9d3230cd.js

dawidd6/action-send-mail/_next/static/chunks/672f3965-60ab34eb9d3230cd.js

:gear: GitHub Action for sending emails

5/10
Maintained action available
chainguard-dev/digestabot

chainguard-dev/digestabot

A Github Action to automatically update digests for container images.

8/10
peakoss/anti-slop

peakoss/anti-slop

A GitHub action that detects and automatically closes low-quality and AI slop PRs.

3/10
yonasbsd/ghost/.github/actions/setup-docker-registry-mirrors

yonasbsd/ghost/.github/actions/setup-docker-registry-mirrors

Independent technology for modern publishing, memberships, subscriptions and newsletters.

5/10
Maintained action available
step-security/read-yaml/__builder_checkout_dir__/.github/actions/image

step-security/read-yaml/__builder_checkout_dir__/.github/actions/image

A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.

10/10
sasobadovinac/occt/.github/actions/setup-msys2

sasobadovinac/occt/.github/actions/setup-msys2

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

3/10
edera-dev/libscap-bindings/.github/actions/install-llvm

edera-dev/libscap-bindings/.github/actions/install-llvm

Rust bindings for Falco's `libscap` eBPF monitoring backend C library

5/10
Maintained action available
launchdarkly/dotnet-logging-adapter-nlog/.github/actions/build-docs

launchdarkly/dotnet-logging-adapter-nlog/.github/actions/build-docs

Adapter from LaunchDarkly.Logging API to NLog

4/10
actionutils/dynamic-uses

actionutils/dynamic-uses

Dynamically resolve and use another GitHub action

2/10
grafana/prometheus-alertmanager/.github/promci/actions/setup_environment

grafana/prometheus-alertmanager/.github/promci/actions/setup_environment

Prometheus Alertmanager

4/10
mergifyio/gha-mergify-ci

mergifyio/gha-mergify-ci

GitHub Actions integration with Mergify CI Issues

4/10
Maintained action available