StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

terramate-io/terramate-action

terramate-io/terramate-action

Set Up Terramate CLI in your GitHub Actions Workflows

4/10
okta/okta-idx-swift/.github/actions/setup-secrets

okta/okta-idx-swift/.github/actions/setup-secrets

Okta IDX API consumption layer for Swift

6/10
tsukimarf/typescript-eslint/.github/actions/prepare-build

tsukimarf/typescript-eslint/.github/actions/prepare-build

:sparkles: Monorepo for all the tooling which enables ESLint to support TypeScript

3/10
grafana/k6-extension-actions/setup-xk6

grafana/k6-extension-actions/setup-xk6

Reusable composite GitHub actions to support k6 extension development.

4/10
wordpress/props-bot-action

wordpress/props-bot-action

A GitHub Action for compiling a list of contributor props.

3/10
Maintained action available
huntridge-labs/argus/.github/actions/scanner-checkov

huntridge-labs/argus/.github/actions/scanner-checkov

Argus brings β€œa hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
yonasbsd/session-desktop/actions/image

yonasbsd/session-desktop/actions/image

Session Desktop - A Decentralized, Onion Routed, Private Messenger

2/10
step-security/setup-msbuild/__builder_checkout_dir__/.github/actions/privacy-check

step-security/setup-msbuild/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications. Secure drop-in replacement for microsoft/setup-msbuild.

8/10
ministryofjustice/claim-assess-regression-tests/.github/actions/fill

ministryofjustice/claim-assess-regression-tests/.github/actions/fill

Automated tests for claim and assess

5/10
Maintained action available
yonasbsd/wazuh/.github/actions/vulnerability_scanner_deps

yonasbsd/wazuh/.github/actions/vulnerability_scanner_deps

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10
Maintained action available
andife/openvino/src/.github/actions/system_info

andife/openvino/src/.github/actions/system_info

OpenVINOβ„’ is an open source toolkit for optimizing and deploying AI inference

3/10
sonarsource/sonarqube-cli/.github/actions/setup-bun

sonarsource/sonarqube-cli/.github/actions/setup-bun

Command-line interface for SonarQube with AI agent integration. Scan for secrets and get fast feedback on code quality and security from your terminal.

5/10
Maintained action available
caffeelake/cilium/.github/actions/wait-for-images

caffeelake/cilium/.github/actions/wait-for-images

eBPF-based Networking, Security, and Observability

3/10
omniverse-dev-new-house/security-review-agent

omniverse-dev-new-house/security-review-agent

LLM-powered security review β€” analyzes PR diffs and posts findings as PR comments

1/10
haya14busa/action-depup

haya14busa/action-depup

Action which updates dependencies automatically

5/10
Maintained action available
canonical/documentation-workflows/public-layout.tsx

canonical/documentation-workflows/public-layout.tsx

Reusable workflows for the documentation team

3/10
step-integration-tests/auto-pdpr-test-15908-11/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-15908-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
davideviolante/pr-automerge-action

davideviolante/pr-automerge-action

GitHub Action to automatically merge pull requests when approved by N reviewers.

2/10
Maintained action available
igorskyflyer/action-readfile

igorskyflyer/action-readfile

🌬️ A GitHub Action to read an arbitrary file and either output it or use it in another GitHub Action. πŸƒ

2/10
dustin4444/storage/.github/actions/setup-node-dependencies

dustin4444/storage/.github/actions/setup-node-dependencies

S3 compatible object storage service that stores metadata in Postgres

5/10
Maintained action available