StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

codacy/codacy-analysis-cli-action

codacy/codacy-analysis-cli-action

GitHub Action for the codacy-analysis-cli

5/10
infracost/actions/fill

infracost/actions/fill

GitHub Action for Infracost. See cloud cost estimates for Terraform in pull requests. ๐Ÿ’ฐ๐Ÿ“‰ Love your cloud bill!

5/10
Maintained action available
gittools/cicd/checkout

gittools/cicd/checkout

Common GitHub action that can be re-used across GitTools repositories

4/10
labbs/github-actions-exporter

labbs/github-actions-exporter

github-actions-exporter for prometheus

2/10
zingdevlimited/actions-helpers/build-now/terraform-init/backend-proxy

zingdevlimited/actions-helpers/build-now/terraform-init/backend-proxy

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks.

4/10
Maintained action available
dustin4444/assets-info/.github/actions/fill

dustin4444/assets-info/.github/actions/fill

Subscan assets info

2/10
pytorch/xla/.actions/.github/workflows/setup

pytorch/xla/.actions/.github/workflows/setup

Enabling PyTorch on XLA Devices (e.g. Google TPU)

1/10
step-security/amazon-ecr-login/__builder_checkout_dir__/.github/actions/privacy-check

step-security/amazon-ecr-login/__builder_checkout_dir__/.github/actions/privacy-check

Logs into Amazon ECR with the local Docker client. Secure drop-in replacement for aws-actions/amazon-ecr-login.

10/10
steven-sheehy/github-changelog-generator

steven-sheehy/github-changelog-generator

Generates release notes that can be published to GitHub

4/10
docker/bake-action/subaction/gye601

docker/bake-action/subaction/gye601

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
security-code-scan/security-code-scan-results-action

security-code-scan/security-code-scan-results-action

GitHub Action to integrate https://github.com/security-code-scan/security-code-scan into CI/CD process.

2/10
google/oss-fuzz/infra/cifuzz/actions/run_fuzzers

google/oss-fuzz/infra/cifuzz/actions/run_fuzzers

OSS-Fuzz - continuous fuzzing for open source software.

8/10
step-security/asdf-vm-actions/image

step-security/asdf-vm-actions/image

GitHub Actions for the asdf version manager. Secure drop-in replacement for asdf-vm/actions.

10/10
anchore/go-homedir/.github/actions/public-layout.tsx

anchore/go-homedir/.github/actions/public-layout.tsx

Go library for detecting and expanding the user's home directory without cgo.

6/10
paketo-buildpacks/github-config/actions/issue/add-to-project

paketo-buildpacks/github-config/actions/issue/add-to-project

Common repository configuration

7/10
step-integration-tests/auto-pdpr-test-02568-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-02568-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
cdatehortuab/github-action-push-to-another-repository

cdatehortuab/github-action-push-to-another-repository

github Action to push files into another Github repository

3/10
equinor/action-checkstyle

equinor/action-checkstyle

Fork of the original action to run Checkstyle on your Java code.

7/10
andife/openvino/openvino/.github/actions/image

andife/openvino/openvino/.github/actions/image

OpenVINOโ„ข is an open source toolkit for optimizing and deploying AI inference

3/10
step-integration-tests/auto-pdpr-test-88355-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88355-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10