StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/ghaction-upx

step-security/ghaction-upx

GitHub Action for UPX, the Ultimate Packer for eXecutables. Secure drop-in replacement for crazy-max/ghaction-upx.

8/10
Maintained by StepSecurity
sgammon/copybara-action

sgammon/copybara-action

Runs https://github.com/google/copybara in GitHub Actions. Copybara transforms and moves code between repositories.

3/10
smartcontractkit/.github/.github/actions/build-chainlink-image

smartcontractkit/.github/.github/actions/build-chainlink-image

reusable GHA workflows and actions

5/10
Maintained action available
taiki-e/create-gh-release-action

taiki-e/create-gh-release-action

GitHub Action for creating GitHub Releases based on changelog.

8/10
step-security/release-please-action-oss/__builder_checkout_dir__/.github/actions/privacy-check

step-security/release-please-action-oss/__builder_checkout_dir__/.github/actions/privacy-check

Automated releases based on conventional commits. Secure drop-in replacement for release-please-oss/release-please-action.

10/10
sonarsource/release-github-actions/public-layout.tsx

sonarsource/release-github-actions/public-layout.tsx

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10
envoyproxy/toolshed/actions/docker/fill

envoyproxy/toolshed/actions/docker/fill

7/10
redpanda-data/llvm-project/workflows-main/.github/workflows/release-binaries-setup-stage

redpanda-data/llvm-project/workflows-main/.github/workflows/release-binaries-setup-stage

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.

3/10
elastic/apm-queue/.github/actions/system-test

elastic/apm-queue/.github/actions/system-test

Abstraction layer over Kafka / GCP PubSub Lite to produce and consume records

4/10
ozi-project/secure-release

ozi-project/secure-release

OZI secure release workflow

3/10
slsa-framework/slsa-github-generator/.github/actions/generate-attestations

slsa-framework/slsa-github-generator/.github/actions/generate-attestations

Language-agnostic SLSA provenance generation for Github Actions

4/10
launchdarkly/erlang-server-sdk/.github/actions/fill

launchdarkly/erlang-server-sdk/.github/actions/fill

LaunchDarkly Server-Side SDK for Erlang/Elixir

6/10
akladiev/labeler

akladiev/labeler

An action for automatically labelling pull requests

2/10
louy/maintain-one-pull-request

louy/maintain-one-pull-request

Github Action for maintaining a single pull request for a set of given head/base branches

2/10
allenai/setup-beaker

allenai/setup-beaker

Set up your GitHub Actions workflow with the Beaker command-line client

4/10
nodoubtz-record-label/pipelines/.github/actions/deploy

nodoubtz-record-label/pipelines/.github/actions/deploy

Machine Learning Pipelines for Kubeflow

4/10
ministryofjustice/opg-data-deputy-reporting/_ghsemveraction/.github/actions/branch-name

ministryofjustice/opg-data-deputy-reporting/_ghsemveraction/.github/actions/branch-name

Deputy reporting integration with OPG Data: Managed by opg-org-infra & Terraform

6/10
kneemaa/github-action-rotate-aws-secrets

kneemaa/github-action-rotate-aws-secrets

Github Action to rotate AWS Access Keys stored in a repositories secrets

3/10
flatherskevin/semver-action

flatherskevin/semver-action

Bump current semantic version based on Git tagging

2/10
coveo/ui-kit/.github/actions/cypress-atomic-screenshots

coveo/ui-kit/.github/actions/cypress-atomic-screenshots

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available