StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

docker/build-push-action/public-layout.tsx

docker/build-push-action/public-layout.tsx

GitHub Action to build and push Docker images with Buildx

6/10
step-security/setup-inso

step-security/setup-inso

Make inso available in your GitHub Actions workflows. Secure drop-in replacement for kong/setup-inso.

8/10
Maintained by StepSecurity
step-security/git-tag-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/git-tag-action/__builder_checkout_dir__/.github/actions/privacy-check

[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.

8/10
mdjahid11978-design/act/.github/actions/choco

mdjahid11978-design/act/.github/actions/choco

Run your GitHub Actions locally ๐Ÿš€

4/10
elementary/actions/gettext-template

elementary/actions/gettext-template

Reusable GitHub Actions for elementary apps

6/10
rudderlabs/airbyte/.github/actions/match-github-to-slack-user

rudderlabs/airbyte/.github/actions/match-github-to-slack-user

Airbyte is an open-source EL(T) platform that helps you replicate your data in your warehouses, lakes and databases.

1/10
openvex/setup-vexctl

openvex/setup-vexctl

VEXctl GitHub Action

5/10
ahmadnassri/action-dependabot-auto-merge

ahmadnassri/action-dependabot-auto-merge

Automatically merge Dependabot PRs when version comparison is within range

3/10
step-security/release-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/release-action/__builder_checkout_dir__/.github/actions/privacy-check

An action which manages a github release. Secure drop-in replacement for ncipollo/release-action.

9/10
step-security/dprint-check/__builder_checkout_dir__/.github/actions/privacy-check

step-security/dprint-check/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action for running `dprint check`. Secure drop-in replacement for dprint/check.

10/10
cloudposse/github-action-docker-image-exists

cloudposse/github-action-docker-image-exists

Github Action check if Docker image exists by pulling it

6/10
step-integration-tests/auto-pdpr-test-57545-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-57545-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/dynamic-matrix

step-security/dynamic-matrix

Secure drop-in replacement for coactions/dynamic-matrix.

10/10
Maintained by StepSecurity
arcjet/arcjet-js/.github/actions/pin-npm

arcjet/arcjet-js/.github/actions/pin-npm

Arcjet JavaScript (JS) / TypeScript SDK. Stop bots and automated attacks from burning your AI budget, leaking data, or misusing tools with Arcjet's AI security building blocks.

6/10
restackio/update-json-file-action

restackio/update-json-file-action

Updates any set of keys inside a json file to the provided values

3/10
tanker187/playwright/.github/actions/image

tanker187/playwright/.github/actions/image

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

4/10
dschep/install-pipenv-action

dschep/install-pipenv-action

A Github action to install pipenv

3/10
kong/slsa-generator/__builder_checkout_dir__/.github/actions/image

kong/slsa-generator/__builder_checkout_dir__/.github/actions/image

Language-agnostic SLSA provenance generation for Github Actions

3/10
elastic/cloudbeat/.github/actions/public-layout.tsx

elastic/cloudbeat/.github/actions/public-layout.tsx

Analyzing Cloud Security Posture

4/10
Maintained action available
americanexpress/task-status-pr-checker

americanexpress/task-status-pr-checker

This is triggered when a pull request is created. If the pull request has pending tasks. The pull request won't be merged and the status is updated on the pull request checks.

4/10