StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

rajbos-actions/blog-post-workflow

rajbos-actions/blog-post-workflow

Show your latest blog posts from any sources or StackOverflow activity or Youtube Videos on your GitHub profile/project readme automatically using the RSS feed

2/10
elastic/apm-agent-java/.github/workflows/maven-goal

elastic/apm-agent-java/.github/workflows/maven-goal

5/10
Maintained action available
anchore/sbom-action

anchore/sbom-action

GitHub Action for creating software bill of materials using Syft.

8/10
thiagodnf/yaml-schema-checker

thiagodnf/yaml-schema-checker

A Github action for validating .yaml files using JSON schemas

3/10
chainguard-actions/softprops-action-gh-release

chainguard-actions/softprops-action-gh-release

3/10
Maintained action available
ministryofjustice/hmpps-github-actions/.github/actions/trivy-scan

ministryofjustice/hmpps-github-actions/.github/actions/trivy-scan

Github actions for HMPPS projects

6/10
edge/simple-slack-notify

edge/simple-slack-notify

Slack notification action that just works

0/10
step-security/github-actions-ansible-vault/__builder_checkout_dir__/.github/actions/privacy-check

step-security/github-actions-ansible-vault/__builder_checkout_dir__/.github/actions/privacy-check

Ansible for GitHub Actions. Secure drop-in replacement for taichunmin/github-actions-ansible-vault.

10/10
approved-3rd-party-actions/r-lib-actions/setup-pandoc

approved-3rd-party-actions/r-lib-actions/setup-pandoc

GitHub Actions for the R community

3/10
fnkr/github-action-ghr

fnkr/github-action-ghr

GitHub Action to upload build artifacts to GitHub releases.

4/10
anchore/packageurl-go/.github/actions/wait-for-check

anchore/packageurl-go/.github/actions/wait-for-check

Go implementation of the package url spec

6/10
axelarnetwork/axelar-gmp-sdk-solidity/.github/actions/fill

axelarnetwork/axelar-gmp-sdk-solidity/.github/actions/fill

Solidity libraries and utilities provided by Axelar.

3/10
jorgebg/stateful-action

jorgebg/stateful-action

An utility for managing the state of your application on a reserved branch.

3/10
googleapis/librarian/.github/actions/install-protoc

googleapis/librarian/.github/actions/install-protoc

CLI for managing SDK client library configuration, generation and releases

8/10
udlose/aspnetcore/actions/image

udlose/aspnetcore/actions/image

ASP.NET Core is a cross-platform .NET framework for building modern cloud-based web applications on Windows, Mac, or Linux.

5/10
Maintained action available
appleboy/scp-action

appleboy/scp-action

GitHub Action that copy files and artifacts via SSH.

5/10
step-security/fetch-gh-release-asset

step-security/fetch-gh-release-asset

Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.

9/10
Maintained by StepSecurity
ad-m/github-push-action

ad-m/github-push-action

GitHub actions to push back to repository eg. updated code

5/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/fill

ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/fill

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
sambarker/kroxylicious/.github/actions/common/setup-java

sambarker/kroxylicious/.github/actions/common/setup-java

4/10
Maintained action available