StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

connor-baer/action-sync-branch

connor-baer/action-sync-branch

GitHub Action to keep a branch in sync with the current branch

6/10
ministryofjustice/laa-civil-manage/.github/actions/deploy

ministryofjustice/laa-civil-manage/.github/actions/deploy

Frontend service to allow legal providers to manage their applications for civil legal aid.

8/10
step-integration-tests/auto-pdpr-test-15558-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-15558-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-integration-tests/auto-pdpr-test-81607-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-81607-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
hashgraph/stablecoin-studio/.github/actions/create-env-file

hashgraph/stablecoin-studio/.github/actions/create-env-file

All-in-one stablecoin configuration, issuance, and management

2/10
maxdesiatov/swift-windows-action

maxdesiatov/swift-windows-action

GitHub Action for building and testing your code with Swift on Windows

0/10
nvidia/nemo-retriever/fw-ci-templates/.github/actions/publish-docs

nvidia/nemo-retriever/fw-ci-templates/.github/actions/publish-docs

NeMo Retriever Library is a scalable, performance-oriented document content and metadata extraction microservice. NeMo Retriever Library uses specialized NVIDIA NIM microservices to find, contextualize, and extract text, tables, charts and images that you can use in downstream generative applications.

6/10
lcarva/review-rot-action/web

lcarva/review-rot-action/web

GitHub actions for review-rot

3/10
coursgranja91-hash/erk/.github/actions/setup-claude-code

coursgranja91-hash/erk/.github/actions/setup-claude-code

erk is a tool for the orchestration and management of plan-oriented agentic engineering.

3/10
run-ai/gajira-find-issue-key

run-ai/gajira-find-issue-key

2/10
project-tick/project-tick/.github/actions/fill

project-tick/project-tick/.github/actions/fill

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10
step-security/cffconvert-github-action

step-security/cffconvert-github-action

GitHub action to validate CITATION.cff files, and convert to other citation formats. Secure drop-in replacement for citation-file-format/cffconvert-github-action.

10/10
Maintained by StepSecurity
step-security/docker-build-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/docker-build-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10
jfagoagas/grafana/actions/metrics-collector

jfagoagas/grafana/actions/metrics-collector

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10
grafana/plugin-ci-workflows/actions/plugins/docs/test

grafana/plugin-ci-workflows/actions/plugins/docs/test

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10
opea-project/validation/actions/trivy-scan

opea-project/validation/actions/trivy-scan

3/10
equinor/cc-components/.github/actions/get-fusion-token

equinor/cc-components/.github/actions/get-fusion-token

Components and apps for CC.

5/10
launchdarkly/go-server-sdk-redis-go-redis/.github/actions/coverage

launchdarkly/go-server-sdk-redis-go-redis/.github/actions/coverage

Redis integration for the LaunchDarkly SDK for Server-side Go (with go-redis client)

5/10
Maintained action available
ministryofjustice/laa-data-claims-reporting-service/.github/deploy_branch

ministryofjustice/laa-data-claims-reporting-service/.github/deploy_branch

Java service to generate claims reports

8/10
step-security/docker-login-action

step-security/docker-login-action

GitHub Action to login against a Docker registry. Secure drop-in replacement for docker/login-action.

10/10
Maintained by StepSecurity