StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/public-layout.tsx

ministryofjustice/hmpps-github-shared-actions/.github/actions/build-test-and-deploy/public-layout.tsx

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10
mellanox/k8snetworkplumbingwg-plugins/.github/actions/retest-action

mellanox/k8snetworkplumbingwg-plugins/.github/actions/retest-action

Some reference and example networking plugins, maintained by the CNI team.

5/10
Maintained action available
open-edge-platform/geti-ci/actions/collect-sbom-library

open-edge-platform/geti-ci/actions/collect-sbom-library

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10
ory/ci/newsletter

ory/ci/newsletter

Automation and robots for Ory's CI and CD pipelines

4/10
grafana/writers-toolkit/.github/actions/website-sync

grafana/writers-toolkit/.github/actions/website-sync

Technical documentation guidelines for Grafana Labs documentation

8/10
ocular-d/json-linter

ocular-d/json-linter

GitHub Action

3/10
tj-actions/coverage-badge-py

tj-actions/coverage-badge-py

:octocat: Github action to generate coverage badge without uploading results to a 3rd party.

5/10
qoomon/actions--create-commit

qoomon/actions--create-commit

GitHub Action to create signed commits from within a GitHub Action workflow

5/10
Maintained action available
sasobadovinac/palace/.github/actions/public-layout.tsx

sasobadovinac/palace/.github/actions/public-layout.tsx

3D finite element solver for computational electromagnetics

5/10
Maintained action available
dustin4444/desktop/.github/actions/public-layout.tsx

dustin4444/desktop/.github/actions/public-layout.tsx

Focus on what matters instead of fighting with Git.

5/10
Maintained action available
lancemccarthy/code-sign-action

lancemccarthy/code-sign-action

Action that signs libraries with a code signing certificate.

0/10
epam/ai-dial-ci/actions/public-layout.tsx

epam/ai-dial-ci/actions/public-layout.tsx

Continuous Integration instrumentation for AI DIAL components

8/10
david-a-wheeler/flawfinder

david-a-wheeler/flawfinder

a static analysis tool for finding vulnerabilities in C/C++ source code

6/10
mathieusoysal/javadoc-publisher.yml

mathieusoysal/javadoc-publisher.yml

Generate Javadoc from your maven/gradle project and deploy it with GitHub Page.

6/10
dotnet/docs-tools/actions/fill

dotnet/docs-tools/actions/fill

This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.

3/10
Maintained action available
sonarsource/sonar-flex/.actions/image

sonarsource/sonar-flex/.actions/image

6/10
useblacksmith/setup-docker-builder

useblacksmith/setup-docker-builder

2/10
Maintained action available
phpstan/phpstan-doctrine/build-infection/.github/actions/setup-php

phpstan/phpstan-doctrine/build-infection/.github/actions/setup-php

Doctrine extensions for PHPStan

7/10
nvidia/nemo-relay/.github/actions/load-ci-tool-versions

nvidia/nemo-relay/.github/actions/load-ci-tool-versions

Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.

6/10
onebrief/gotenberg/.github/actions/build-test-push

onebrief/gotenberg/.github/actions/build-test-push

A Docker-powered stateless API for PDF files.

5/10
Maintained action available