StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-10987-3/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-10987-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
pytorch/rl/test-infra/.github/actions/setup-nvidia

pytorch/rl/test-infra/.github/actions/setup-nvidia

A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.

3/10
Maintained action available
step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/privacy-check

Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.

9/10
step-integration-tests/auto-pdpr-test-47784-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-47784-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
blackoretech/ghaction-import-gpg

blackoretech/ghaction-import-gpg

GitHub Action to import a GPG key

3/10
duckdb/duckdb-ci/.github/actions/checkout

duckdb/duckdb-ci/.github/actions/checkout

4/10
Maintained action available
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/content

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/content

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
recidiviz/claude-code-security-review

recidiviz/claude-code-security-review

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

4/10
zscalercwp/zscaler-iac-action

zscalercwp/zscaler-iac-action

1/10
step-security/snyk-actions/cocoapods

step-security/snyk-actions/cocoapods

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
cresta/action-lint-go-external

cresta/action-lint-go-external

4/10
cderv/actions/setup-pandoc-nightly

cderv/actions/setup-pandoc-nightly

GitHub Actions for the R community

2/10
pedrolamas/handlebars-action

pedrolamas/handlebars-action

:octocat: Transform files in your repository with Handlebars templating!

4/10
launchdarkly/haskell-server-sdk/.github/actions/public-layout.tsx

launchdarkly/haskell-server-sdk/.github/actions/public-layout.tsx

LaunchDarkly Server-Side SDK for Haskell

4/10
chainguard-actions/github-codeql-action/autobuild

chainguard-actions/github-codeql-action/autobuild

4/10
Maintained action available
posthog/check-package-version

posthog/check-package-version

Release automatically with this npm package version check by PostHog

4/10
posthog/posthog/.github/actions/semgrep-ci

posthog/posthog/.github/actions/semgrep-ci

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools โ€“ AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more โ€“ capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10
Maintained action available
ministryofjustice/laa-cdcr/.github/actions/fill

ministryofjustice/laa-cdcr/.github/actions/fill

Replacement mechanism for the Oracle CDC functionality currently operational on CWA and CIS.

5/10
catchen/check-git-status-action

catchen/check-git-status-action

Do you check in dependency packages or build artefacts? If yes this GitHub Action helps you ensure they are not out-of-sync.

4/10
deepakputhraya/action-pr-title

deepakputhraya/action-pr-title

Github action to enforce Pull Request title conventions

5/10