StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

clementtsang/delete-tag-and-release

clementtsang/delete-tag-and-release

Simple action to delete a git tag, and optionally the associated release.

3/10
step-security/docker-build-push-action/image

step-security/docker-build-push-action/image

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

10/10
nvidia/megatron-lm/.github/public-layout.tsx

nvidia/megatron-lm/.github/public-layout.tsx

Ongoing research training transformer models at scale

4/10
Maintained action available
dustin4444/next.js/.github/actions/sccache

dustin4444/next.js/.github/actions/sccache

The React Framework

5/10
Maintained action available
yonasbsd/duckdb/.github/actions/build_extensions

yonasbsd/duckdb/.github/actions/build_extensions

DuckDB is an analytical in-process SQL database management system

7/10
walletconnect/actions/github/cta-assistant

walletconnect/actions/github/cta-assistant

WalletConnect GitHub Actions

3/10
Maintained action available
pytorch/torchrec/test-infra/.github/actions/run-script-with-cache

pytorch/torchrec/test-infra/.github/actions/run-script-with-cache

Pytorch domain library for recommendation systems

3/10
Maintained action available
ericcornelissen/ghasum-testground/.github/actions/public-layout.tsx

ericcornelissen/ghasum-testground/.github/actions/public-layout.tsx

don't look a this, just testing the limits of gha

2/10
celo-org/op-succinct/.github/actions/setup

celo-org/op-succinct/.github/actions/setup

Succinct's Production-Grade Proving Engine for the OP Stack

5/10
Maintained action available
launchdarkly/cpp-sdks/.github/actions/install-ninja

launchdarkly/cpp-sdks/.github/actions/install-ninja

C++ Client/Server SDKs

6/10
mpalmer/action-validator

mpalmer/action-validator

Tool to validate GitHub Action and Workflow YAML files

2/10
peter-evans/autopep8

peter-evans/autopep8

A GitHub action for autopep8, a tool that automatically formats Python code to conform to the PEP 8 style guide.

4/10
step-security/moonrepo-setup-toolchain

step-security/moonrepo-setup-toolchain

A GitHub action to setup and cache the proto and moon toolchains. Secure drop-in replacement for moonrepo/setup-toolchain.

7/10
project-chip/connectedhomeip/.github/actions/perform-codeql-analysis

project-chip/connectedhomeip/.github/actions/perform-codeql-analysis

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

6/10
yonasbsd/mimir/actions/image

yonasbsd/mimir/actions/image

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

5/10
Maintained action available
anthropics/claude-plugins-community/.github/actions/scan-plugins

anthropics/claude-plugins-community/.github/actions/scan-plugins

Community plugin marketplace for Claude Cowork and Claude Code. Read-only mirror โ€” submit plugins at clau.de/plugin-directory-submission.

6/10
sasobadovinac/freecad/.github/workflows/actions/linux/image

sasobadovinac/freecad/.github/workflows/actions/linux/image

Fork of the official git master branch of FreeCAD

7/10
devantler-tech/actions/dotnet-test-action

devantler-tech/actions/dotnet-test-action

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
step-integration-tests/auto-pdpr-test-01664-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-01664-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yiagent/openci/actions/_common/claude-harness

yiagent/openci/actions/_common/claude-harness

Shared CI/CD actions and reusable workflows for GitHub Actions

5/10