StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

jpetrucciani/bandit-check

jpetrucciani/bandit-check

github action to run the bandit security linter

4/10
yonasbsd/umpire/.github/actions/fill

yonasbsd/umpire/.github/actions/fill

An application-focused API for memory management on NUMA & GPU architectures

4/10
asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image

asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image

Build environment matching a FuzzBot running Ubuntu 22.04

2/10
step-integration-tests/auto-pdpr-test-61592-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-61592-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
amondnet/vercel-action

amondnet/vercel-action

This action make a deployment with github actions instead of Vercel builder.

6/10
carabiner-dev/actions/ampel/image

carabiner-dev/actions/ampel/image

GiitHub actions for various tools in the Carabiner ecosystems

6/10
akjus/safety-action

akjus/safety-action

Runs the Safety CLI dependency scanner against your project

2/10
step-security/envsubst-action

step-security/envsubst-action

Github Action for envsubst. Secure drop-in replacement for danielr1996/envsubst-action.

10/10
Maintained by StepSecurity
step-security/snyk-actions/image

step-security/snyk-actions/image

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
bitwarden/gh-actions/release-version-check

bitwarden/gh-actions/release-version-check

Bitwarden-utilized GitHub Actions.

6/10
docker/bake-action/%22qc7ws7/list-targets

docker/bake-action/%22qc7ws7/list-targets

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
redhat-plumbers-in-action/advanced-issue-labeler

redhat-plumbers-in-action/advanced-issue-labeler

๐Ÿ”– Label issues based on input and defined policy

3/10
docker/bake-action/subaction/%3csqsyl6%3e

docker/bake-action/subaction/%3csqsyl6%3e

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
yonasbsd/k6/.github/actions/test-browser

yonasbsd/k6/.github/actions/test-browser

A modern load testing tool, using Go and JavaScript - https://k6.io

4/10
Maintained action available
step-security/setup-buildx-action/_next/static/chunks/40300-e26a046d4034a815.js

step-security/setup-buildx-action/_next/static/chunks/40300-e26a046d4034a815.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10
grafana/traces-drilldown/.github/actions/build

grafana/traces-drilldown/.github/actions/build

Traces Drilldown is a native Grafana application designed to integrate seamlessly with Tempo, the open-source distributed tracing backend, providing a smooth, query-less experience for browsing and analyzing tracing data.

8/10
devantler-tech/actions/todos-action

devantler-tech/actions/todos-action

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
dflook/terraform-fmt

dflook/terraform-fmt

GitHub action to fix formatting of terraform files

3/10
hashicorp/tfc-workflows-github/actions

hashicorp/tfc-workflows-github/actions

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

7/10
eine/tip

eine/tip

GitHub Action to keep a 'tip' pre-release always up-to-date

2/10