StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

hashicorp/actions-persist-metadata

hashicorp/actions-persist-metadata

Persists metadata used by Common Release Tooling

6/10
super-linter/super-linter/action-info.client.tsx

super-linter/super-linter/action-info.client.tsx

Combination of multiple linters to run as a GitHub Action or standalone

7/10
timschoenle/actions/actions/common/read-yaml

timschoenle/actions/actions/common/read-yaml

Composite and Node GitHub Actions, reusable workflows and shared Renovate presets, each released under its own tag.

6/10
iwamot/actions/uv-publish

iwamot/actions/uv-publish

iwamot's shared GitHub Actions composite actions.

6/10
step-security/actions-comment-pull-request/__builder_checkout_dir__/.github/actions/privacy-check

step-security/actions-comment-pull-request/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action to comment pull request. Secure drop-in replacement for thollander/actions-comment-pull-request.

9/10
grafana/prometheus/.github/promci/actions/public-layout.tsx

grafana/prometheus/.github/promci/actions/public-layout.tsx

The Prometheus monitoring system and time series database.

4/10
ossf/scorecard-action/v2.3.3

ossf/scorecard-action/v2.3.3

Official GitHub Action for OpenSSF Scorecard.

7/10
step-security/snyk-actions/elixir-1.18

step-security/snyk-actions/elixir-1.18

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
step-security/snyk-actions/gradle-9-jdk24

step-security/snyk-actions/gradle-9-jdk24

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
brittanyshelton23/docs/.github/actions/get-changed-files

brittanyshelton23/docs/.github/actions/get-changed-files

The open-source repo for docs.github.com

2/10
Maintained action available
boostport/setup-cloudflare-warp

boostport/setup-cloudflare-warp

Access Cloudflare Zero-Trust applications in GitHub Actions Workflows

3/10
Maintained action available
amn41/comment-on-pr

amn41/comment-on-pr

A GitHub Action to comment on the relevant open PR when a commit is pushed.

3/10
ammaraskar/gcc-problem-matcher

ammaraskar/gcc-problem-matcher

Github Action to problem match gcc output

4/10
remarkablemark/setup-codeclimate

remarkablemark/setup-codeclimate

โš™๏ธ Set up GitHub Actions workflow with Code Climate test reporter.

0/10
caffeelake/kestra/actions/.github/actions/image

caffeelake/kestra/actions/.github/actions/image

:zap: Universal Workflow Orchestration Platform โ€” Code in any language, run anywhere. 800+ plugins for data, infrastructure, and AI automation.

5/10
Maintained action available
tempoxyz/gh-actions/actions/scan-github-actions

tempoxyz/gh-actions/actions/scan-github-actions

Reusable GitHub Actions for Tempo

4/10
Maintained action available
bitwarden/gh-actions/check-permission

bitwarden/gh-actions/check-permission

Bitwarden-utilized GitHub Actions.

6/10
languine-ai/languine

languine-ai/languine

Translate your application with Languine CLI powered by AI.

2/10
kong/ai-deck-converter/.github/actions/ksai/.github/actions/ai-reviewer-federated

kong/ai-deck-converter/.github/actions/ksai/.github/actions/ai-reviewer-federated

Translates an AI Gateway entity-model YAML configuration into a Kong Gateway decK declarative configuration

8/10
step-security/action-suggester/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-suggester/__builder_checkout_dir__/.github/actions/secure-download-artifact

:dog: Suggests any code changes based on diff through GitHub Multi-line code suggestions by using reviewdog. Secure drop-in replacement for reviewdog/action-suggester.

10/10