StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

advanced-security/sarif-toolkit/public-layout.tsx

advanced-security/sarif-toolkit/public-layout.tsx

All things SARIF, as an Action

7/10
snyk/actions/dotnet

snyk/actions/dotnet

A set of GitHub actions for checking your projects for vulnerabilities.

5/10
reviewdog/action-depup

reviewdog/action-depup

Action which updates dependencies automatically

5/10
Maintained action available
dustin4444/docs-builder/.github/actions/image

dustin4444/docs-builder/.github/actions/image

5/10
Maintained action available
kong/public-shared-actions/slack-actions/workflow-notification

kong/public-shared-actions/slack-actions/workflow-notification

Shared actions available to both public and private repositories

5/10
grafana/shared-workflows/actions/docker-export-digest

grafana/shared-workflows/actions/docker-export-digest

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10
phpstan/phpstan-phpunit/build-infection/.github/actions/setup-php

phpstan/phpstan-phpunit/build-infection/.github/actions/setup-php

PHPUnit extensions and rules for PHPStan

7/10
rudderlabs/github-action-check-pr-title

rudderlabs/github-action-check-pr-title

Check PR title against conventional commit standard

3/10
oaslananka-lab/boardguard

oaslananka-lab/boardguard

Hardware design review, CI, and release preflight for KiCad projects

6/10
lfreleng-actions/node-create-npmrc-action

lfreleng-actions/node-create-npmrc-action

Creates an NPM configuration file containing credentials

4/10
nv-gha-runners/cuda-python/.github/actions/fetch_ctk

nv-gha-runners/cuda-python/.github/actions/fetch_ctk

CUDA Python: Performance meets Productivity

4/10
gottox/irc-message-action

gottox/irc-message-action

Github Action to Interact with IRC Channels and Users

0/10
ashishkurmi/harden-runner

ashishkurmi/harden-runner

GitHub Action to prevent certain types of software supply chain attacks

5/10
Maintained action available
ory/ci/sdk/generate

ory/ci/sdk/generate

Automation and robots for Ory's CI and CD pipelines

4/10
svenstaro/upx-action

svenstaro/upx-action

Strips and runs upx on binaries

3/10
step-security/add-commit-push

step-security/add-commit-push

โœจ Automagically git add, git commit, and git push. Secure drop-in replacement for actions4git/add-commit-push.

10/10
Maintained by StepSecurity
walbo/validate-json

walbo/validate-json

Validate JSON files agains their `$schema`

2/10
venh/branch-protection

venh/branch-protection

Custom GitHub Action to apply / remove Branch Protection Rules to specified branches of repositories within a GitHub Organization

1/10
qoomon/actions--context

qoomon/actions--context

Access additional job context informations like current job details (log url, environment, ...) and current deployment details.

3/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/fill

ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/fill

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10