StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

enricomi/publish-unit-test-result-action/misc/action/fill

enricomi/publish-unit-test-result-action/misc/action/fill

GitHub Action to publish unit test results on GitHub

3/10
step-integration-tests/auto-pdpr-test-57545-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-57545-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
dmptrluke/django-published/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

dmptrluke/django-published/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Control public visibility of model instances

3/10
step-security/action-surefire-report/__builder_checkout_dir__/.github/actions/privacy-check

step-security/action-surefire-report/__builder_checkout_dir__/.github/actions/privacy-check

Reports surefire test results as GitHub Pull Request Check. Secure drop-in replacement for ScaCap/action-surefire-report.

9/10
daspn/private-actions-checkout

daspn/private-actions-checkout

GitHub Action to make custom private actions easily available to any workflow

2/10
selfxyz/self/.github/actions/cache-bundler

selfxyz/self/.github/actions/cache-bundler

Prove your self

2/10
Maintained action available
docker/bake-action/subaction/%22qogxn1

docker/bake-action/subaction/%22qogxn1

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
nvidia/nemoclaw/.trusted-wechat-audit-bootstrap/.github/actions/ci-wechat-runtime-audit

nvidia/nemoclaw/.trusted-wechat-audit-bootstrap/.github/actions/ci-wechat-runtime-audit

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
step-security/s3-actions-cache/save

step-security/s3-actions-cache/save

Cache to S3 storage with official actions/cache@v2 fallback. Secure drop-in replacement for tespkg/actions-cache.

9/10
Maintained by StepSecurity
dustin4444/react-native-screens/close-when-stale

dustin4444/react-native-screens/close-when-stale

Native navigation primitives for your React Native app.

5/10
Maintained action available
anchore/oss-docs/.github/actions/bootstrap

anchore/oss-docs/.github/actions/bootstrap

Anchore OSS Documentation

6/10
datadog/integrations-core/.github/actions/setup-ddev

datadog/integrations-core/.github/actions/setup-ddev

Core integrations of the Datadog Agent

4/10
Maintained action available
grafana/shared-workflows/actions/lint-pr-title

grafana/shared-workflows/actions/lint-pr-title

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10
step-security/cffconvert-github-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/cffconvert-github-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action to validate CITATION.cff files, and convert to other citation formats. Secure drop-in replacement for citation-file-format/cffconvert-github-action.

10/10
actions-security-demo/pytorch/.github/actions/image

actions-security-demo/pytorch/.github/actions/image

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10
grafana/plugin-ci-workflows/actions/plugins/changelog

grafana/plugin-ci-workflows/actions/plugins/changelog

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10
step-security/snyk-actions/maven-3-jdk-24

step-security/snyk-actions/maven-3-jdk-24

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
adrise/jest-cov-reporter

adrise/jest-cov-reporter

A modern GitHub Action that compares code coverage between branches, detects coverage decreases in changed files, and enforces 100% coverage for new files.

2/10
coveo/ui-kit/.github/actions/e2e-headless-ssr-app-dev

coveo/ui-kit/.github/actions/e2e-headless-ssr-app-dev

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
step-security/dsanders11-project-actions/find-workflow

step-security/dsanders11-project-actions/find-workflow

A collection of actions for automating GitHub projects. Secure drop-in replacement for dsanders11/project-actions.

10/10
Maintained by StepSecurity