StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

jahid11978/openclaw-jahid.ai/.ci-harness/.github/actions/git-owner

jahid11978/openclaw-jahid.ai/.ci-harness/.github/actions/git-owner

jahid

4/10
Maintained action available
sozercan/dynamo/.github/actions/setup-snapshot-agent

sozercan/dynamo/.github/actions/setup-snapshot-agent

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
step-integration-tests/auto-pdpr-test-48086-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-48086-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
suzuki-shunsuke/commit-action

suzuki-shunsuke/commit-action

GitHub Action to push changes to remote branches by GitHub API. You can create verified commits using GitHub App.

6/10
aerospike-community/spring-data-aerospike-starters/.github/actions/publish-to-github

aerospike-community/spring-data-aerospike-starters/.github/actions/publish-to-github

spring-data-aerospike-starters

6/10
caffeelake/taipy/.github/actions/gui-test/pyi

caffeelake/taipy/.github/actions/gui-test/pyi

Turns Data and AI algorithms into production-ready web applications in no time.

3/10
dflook/terraform-destroy

dflook/terraform-destroy

GitHub action to destroy all resources in a terraform workspace

2/10
sebrollen/toml-action

sebrollen/toml-action

2/10
launchdarkly/rust-server-sdk/.github/actions/ci

launchdarkly/rust-server-sdk/.github/actions/ci

LaunchDarkly Server-Side SDK for Rust

6/10
dwisiswant0/setup-go

dwisiswant0/setup-go

Set up your GitHub Actions workflow with a specific version of Go

2/10
qltysh/qlty-action/install

qltysh/qlty-action/install

โ–ถ๏ธ Qlty GitHub Action

6/10
graycoreio/github-actions-magento2/image

graycoreio/github-actions-magento2/image

Github Actions and Workflows that make maintaining Magento2 stores and modules significantly easier.

4/10
Maintained action available
step-integration-tests/auto-pdpr-test-97527-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-97527-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
issue-ops/semver

issue-ops/semver

Handles semantic versioning of repository tags

3/10
nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-plugin-coverage

nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-plugin-coverage

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
grolston/guard-action

grolston/guard-action

GItHub Action for cfn-guard and aws-guard-rules-registry

3/10
codacy/codacy-cli-v2-action

codacy/codacy-cli-v2-action

5/10
caffeelake/cilium/.github/actions/get-cloud-kubeconfig

caffeelake/cilium/.github/actions/get-cloud-kubeconfig

eBPF-based Networking, Security, and Observability

3/10
gensecaihq/shai-hulud-2.0-detector

gensecaihq/shai-hulud-2.0-detector

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

6/10
caffeelake/beyla/actions/fill

caffeelake/beyla/actions/fill

eBPF-based autoinstrumentation of HTTP and HTTPS services

3/10
Maintained action available