StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-15640-2/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-15640-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout'

slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout'

Language-agnostic SLSA provenance generation for Github Actions

4/10
grafana/grafana-github-actions-go/update-changelog

grafana/grafana-github-actions-go/update-changelog

Grafana GitHub Actions in Golang

6/10
grafana/plugin-actions/playwright-gh-pages/upload-report-artifacts

grafana/plugin-actions/playwright-gh-pages/upload-report-artifacts

6/10
bitwarden/gh-actions/crowdin

bitwarden/gh-actions/crowdin

Bitwarden-utilized GitHub Actions.

6/10
homebrew/actions/post-build

homebrew/actions/post-build

๐Ÿš€ Homebrew's GitHub Actions

7/10
rasahq/dependabot-batch-updater

rasahq/dependabot-batch-updater

2/10
step-security/quarto-actions/image

step-security/quarto-actions/image

Secure drop-in replacement for quarto-dev/quarto-actions.

10/10
tomchv/wait-my-workflow

tomchv/wait-my-workflow

The objective of this action is to wait the end of a workflow

2/10
ericcornelissen/playground-ghasum/.github/actions/ghasum

ericcornelissen/playground-ghasum/.github/actions/ghasum

don't look a this, just testing the limits of gha

3/10
Maintained action available
chriscarini/github-git-sizer-action

chriscarini/github-git-sizer-action

A GitHub Action for github/git-sizer

4/10
openai/codex/.github/actions/publish-dotslash

openai/codex/.github/actions/publish-dotslash

Lightweight coding agent that runs in your terminal

6/10
tvdias/github-tagger

tvdias/github-tagger

Github action to tag commit with a given version

3/10
projectdiscovery/actions/setup/go

projectdiscovery/actions/setup/go

ProjectDiscovery's Composite Actions

5/10
Maintained action available
jbergstroem/hadolint-gh-action

jbergstroem/hadolint-gh-action

A Dockerfile linter using Hadolint for Github actions that provides code annotations, Github advanced security and more

4/10
vapor/swift-codecov-action

vapor/swift-codecov-action

A GitHub Action which performs Codecov.io uploads with additional support for Swift projects

6/10
oracle-actions/login-ocir

oracle-actions/login-ocir

Login to Oracle Cloud Infrastructure Registry (OCIR)

2/10
yonasbsd/surrealdb/.github/actions/build-macos

yonasbsd/surrealdb/.github/actions/build-macos

A scalable, distributed, collaborative, document-graph database, for the realtime web

2/10
chainguard-dev/actions/setup-hakn

chainguard-dev/actions/setup-hakn

A collection of reusable Github Actions workflows.

6/10
yonasbsd/cargo-binstall

yonasbsd/cargo-binstall

Binary installation for rust projects

3/10
Maintained action available