StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/zingdevlimited-actions-helpers/deploy-assets

step-security/zingdevlimited-actions-helpers/deploy-assets

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks. Secure drop-in replacement for zingdevlimited/actions-helpers.

10/10
Maintained by StepSecurity
kong/changed-files/dir1

kong/changed-files/dir1

fork of changed files git action at a known good commit

4/10
marko-k0/ic/.github/actions/bazel

marko-k0/ic/.github/actions/bazel

Internet Computer blockchain source: the client/replica software run by nodes

2/10
surrealdb/rocksdb/.github/actions/install-maven

surrealdb/rocksdb/.github/actions/install-maven

A library that provides an embeddable, persistent key-value store for fast storage.

4/10
canonical/setup-lxd

canonical/setup-lxd

A GitHub Action to install & configure LXD on a runner.

4/10
freshaengineering/merge-gatekeeper

freshaengineering/merge-gatekeeper

[DevEx] PR merge control - Branch protection enhancement, merge requirements validation, status check aggregation. | TypeScript, GitHub Actions

4/10
Maintained action available
rapidsai/pre-commit-hooks/.github/actions/earliest-python-version

rapidsai/pre-commit-hooks/.github/actions/earliest-python-version

8/10
step-security/devcontainers-ci

step-security/devcontainers-ci

A GitHub Action and Azure DevOps Task designed to simplify using Dev Containers (https://containers.dev) in CI/CD systems. Secure drop-in replacement for devcontainers/ci.

10/10
Maintained by StepSecurity
jenkins-infra/jenkins-maven-cd-action

jenkins-infra/jenkins-maven-cd-action

3/10
step-security/paths-filter/__builder_checkout_dir__/.github/actions/privacy-check

step-security/paths-filter/__builder_checkout_dir__/.github/actions/privacy-check

Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter.

10/10
zeglius/ghcr-oci-retagger

zeglius/ghcr-oci-retagger

3/10
chad-golden/setup-wpr/stop

chad-golden/setup-wpr/stop

A GitHub Action that simplifies recording Windows performance traces using Windows Performance Recorder

3/10
nvidia/kai-scheduler/.github/actions/setup-e2e-cluster

nvidia/kai-scheduler/.github/actions/setup-e2e-cluster

KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale

5/10
Maintained action available
step-security/gha-jobid-action/.github/actions/gha-jobid-action

step-security/gha-jobid-action/.github/actions/gha-jobid-action

โš™๏ธ GitHub Action to get the current workflow run's Job URL and ID. Secure drop-in replacement for Tiryoh/gha-jobid-action.

10/10
tlylt/install-graphviz

tlylt/install-graphviz

Install Graphviz in your GitHub Actions workflow cross-platform

3/10
step-security/protobuf-ci/public-layout.tsx

step-security/protobuf-ci/public-layout.tsx

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
yonasbsd/navidrome/.github/actions/prepare-docker

yonasbsd/navidrome/.github/actions/prepare-docker

๐ŸŽงโ˜๏ธ Modern Music Server and Streamer compatible with Subsonic/Airsonic

3/10
Maintained action available
oxsecurity/megalinter/flavors/documentation

oxsecurity/megalinter/flavors/documentation

๐Ÿฆ™ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10
p4gs/sscsb-action

p4gs/sscsb-action

Run sscsb supply-chain-security scans in your own CI โ€” authenticated scan records for tools.sensiblesecurity.xyz/sscsb/

6/10
tj-actions/git-cliff

tj-actions/git-cliff

:octocat: Github action to run git-cliff with a custom cliff.toml

4/10