StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-90987-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-90987-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
actions/dependency-review-action

actions/dependency-review-action

A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs

9/10
jedsalazar/cg-actions/image

jedsalazar/cg-actions/image

A collection of reusable Github Actions workflows.

3/10
anchore/vunnel/.github/actions/quality-gate

anchore/vunnel/.github/actions/quality-gate

Tool for collecting vulnerability data from various sources (used to build the grype database)

7/10
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content/plugins

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
planetscale/ghcommit-action

planetscale/ghcommit-action

GitHub Action to commit files to a git branch using the ghcommit utility

6/10
tetherto/qvac/.github/actions/verify-prebuild-symbols

tetherto/qvac/.github/actions/verify-prebuild-symbols

Open-source local AI SDK - run AI on-device with no cloud, no API keys. Supports GGUF, RAG, image, music, and video generation, speech-to-text, P2P inference, and more. Cross-platform: Linux, macOS, Windows, Android, iOS.

6/10
wow-actions/potential-duplicates

wow-actions/potential-duplicates

πŸ”Ž Search for potential issue duplicates using Damerau–Levenshtein algorithm

3/10
envoyproxy/toolshed/gh-actions/dispatch

envoyproxy/toolshed/gh-actions/dispatch

7/10
pypa/cibuildwheel

pypa/cibuildwheel

🎑 Build Python wheels for all the platforms with minimal configuration.

7/10
fabiankramm/release-asset-action

fabiankramm/release-asset-action

2/10
kong/docs-plugin-toolkit/.github/reusable-steps/download-quickstart-script

kong/docs-plugin-toolkit/.github/reusable-steps/download-quickstart-script

4/10
step-security/setup-ocaml/lint-doc

step-security/setup-ocaml/lint-doc

GitHub Action for the OCaml programming language. Secure drop-in replacement for ocaml/setup-ocaml.

10/10
Maintained by StepSecurity
mdjahid11978-design/neon/.github/actions/neon-branch-create

mdjahid11978-design/neon/.github/actions/neon-branch-create

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

2/10
stephanebour/actions-php-security-checker

stephanebour/actions-php-security-checker

2/10
microsoft/msvc-code-analysis-action

microsoft/msvc-code-analysis-action

Microsoft Visual C++ Code Analysis GitHub Action

5/10
grafana/plugin-actions/is-compatible

grafana/plugin-actions/is-compatible

6/10
smartcontractkit/.github/actions/image

smartcontractkit/.github/actions/image

reusable GHA workflows and actions

5/10
Maintained action available
anthropics/claude-plugins-community/.github/actions/bump-plugin-shas

anthropics/claude-plugins-community/.github/actions/bump-plugin-shas

Community plugin marketplace for Claude Cowork and Claude Code. Read-only mirror β€” submit plugins at clau.de/plugin-directory-submission.

5/10
Maintained action available
launchdarkly/go-semver/.github/actions/coverage

launchdarkly/go-semver/.github/actions/coverage

semantic version parsing and comparison package

4/10