StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

appimagecrafters/build-appimage

appimagecrafters/build-appimage

GitHub Action for producing AppImages

3/10
step-security/github-action-benchmark

step-security/github-action-benchmark

GitHub Action for continuous benchmarking to keep performance. Secure drop-in replacement for benchmark-action/github-action-benchmark.

10/10
Maintained by StepSecurity
step-security/docs-as-code-confluence/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/docs-as-code-confluence/__builder_checkout_dir__/.github/actions/secure-download-artifact

Publish the content of a folder to confluence Github Action. Secure drop-in replacement for Bhacaz/docs-as-code-confluence.

8/10
zacjw/markdown-html-action

zacjw/markdown-html-action

3/10
celo-org/viem/.github/actions/setup-wagmi

celo-org/viem/.github/actions/setup-wagmi

TypeScript Interface for Ethereum

2/10
nugine/setup-flatc

nugine/setup-flatc

Setup flatc for use in actions

5/10
servicenow/sncicd-plugin-activate

servicenow/sncicd-plugin-activate

2/10
nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-static-checks

nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-static-checks

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
samsung/credsweeper

samsung/credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

7/10
stellar/actions/fill

stellar/actions/fill

GitHub Actions for Stellar repositories.

6/10
adrise/local-cache

adrise/local-cache

This action allows caching dependencies and build outputs to improve workflow execution time on self hosted machine.

2/10
huntridge-labs/argus/.github/actions/scanner-opengrep

huntridge-labs/argus/.github/actions/scanner-opengrep

Argus brings β€œa hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
launchdarkly/dotnet-logging-adapter-commonlogging/.github/actions/ci

launchdarkly/dotnet-logging-adapter-commonlogging/.github/actions/ci

Adapter from LaunchDarkly.Logging API to Common.Logging

5/10
yonasbsd/navidrome/.github/actions/download-taglib

yonasbsd/navidrome/.github/actions/download-taglib

🎧☁️ Modern Music Server and Streamer compatible with Subsonic/Airsonic

3/10
Maintained action available
nvidia-rtx/godot/.github/actions/godot-compat-test

nvidia-rtx/godot/.github/actions/godot-compat-test

NVIDIA fork of Godot Engine – Multi-platform 2D and 3D game engine

3/10
Maintained action available
step-security/runs-on-cache/fill

step-security/runs-on-cache/fill

Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.

10/10
austenstone/actions-playground/.github/actions/hello-world-javascript-action

austenstone/actions-playground/.github/actions/hello-world-javascript-action

Playground for actions

3/10
Maintained action available
suzuki-shunsuke/tfaction/list-working-dirs

suzuki-shunsuke/tfaction/list-working-dirs

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

5/10
Maintained action available
nvidia/goggles_action/actions/pr_checklist

nvidia/goggles_action/actions/pr_checklist

A collection of GitHub Actions to streamline automation for NVIDIA GitHub repositories.

3/10
grafana/falconlogscale-datasource/actions/action-info.client.tsx

grafana/falconlogscale-datasource/actions/action-info.client.tsx

Falcon LogScale data source for Grafana

8/10