StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sh-cho/fluent-bit/.github/actions/fill

sh-cho/fluent-bit/.github/actions/fill

Fast and Lightweight Logs and Metrics processor for Linux, BSD, OSX and Windows

3/10
docker/bake-action/subaction/list-targets/%22%3e%3cp06m46%3e

docker/bake-action/subaction/list-targets/%22%3e%3cp06m46%3e

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
envoyproxy/toolshed/actions/upload/diff

envoyproxy/toolshed/actions/upload/diff

6/10
chronograph-pe/action-download-artifact

chronograph-pe/action-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria

2/10
rapidsai/shared-actions/shared-actions/telemetry-impls/public-layout.tsx

rapidsai/shared-actions/shared-actions/telemetry-impls/public-layout.tsx

6/10
step-security/github-action-aerospike/_next/static/chunks/app/(public)/error-b779f6d875c7105c.js

step-security/github-action-aerospike/_next/static/chunks/app/(public)/error-b779f6d875c7105c.js

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

10/10
febiosoftware/febio-workflows/.github/actions/upload-plugins

febiosoftware/febio-workflows/.github/actions/upload-plugins

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

2/10
oss-docs-tools/code-owner-self-merge

oss-docs-tools/code-owner-self-merge

A GitHub Action for letting CODEOWNERS merge PRs via green PR reviews

3/10
dawidd6/action-send-mail/_next/static/chunks/7dbb2666-c9fca820ef7ffa86.js

dawidd6/action-send-mail/_next/static/chunks/7dbb2666-c9fca820ef7ffa86.js

:gear: GitHub Action for sending emails

5/10
Maintained action available
sonarsource/gh-action-lt-backlog/submitreview

sonarsource/gh-action-lt-backlog/submitreview

Automate GitHub backlog and Kanbans

6/10
grafana/hackathon-12-pyroscope/actions/backport

grafana/hackathon-12-pyroscope/actions/backport

Continuous Profiling Platform. Debug performance issues down to a single line of code

0/10
enricomi/publish-unit-test-result-action/windows%2540v2

enricomi/publish-unit-test-result-action/windows%2540v2

GitHub Action to publish unit test results on GitHub

4/10
Maintained action available
checkmarx/ast-github-action

checkmarx/ast-github-action

GitHub actions of ast scan - Keeping Infrastructure as Code Secure

8/10
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins/column-shortcodes/assets/css/shortcodes.css

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins/column-shortcodes/assets/css/shortcodes.css

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
step-security/dsanders11-project-actions/null

step-security/dsanders11-project-actions/null

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10
spotdemo4/templates/.github/actions/init

spotdemo4/templates/.github/actions/init

nix flake templates

4/10
Maintained action available
mobsf/mobsfscan

mobsf/mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

7/10
dustin4444/next.js/.github/actions/setup-datadog-ci

dustin4444/next.js/.github/actions/setup-datadog-ci

The React Framework

5/10
Maintained action available
onichandame/nats-action

onichandame/nats-action

start nats server(s) for Github Actions

2/10
jofthev/pytorch/.github/actions/diskspace-cleanup

jofthev/pytorch/.github/actions/diskspace-cleanup

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10