StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-88355-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88355-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/setup-uv/__builder_checkout_dir__/.github/actions/fill

step-security/setup-uv/__builder_checkout_dir__/.github/actions/fill

Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/. Secure drop-in replacement for astral-sh/setup-uv.

10/10
sasobadovinac/meshlab/.github/actions/2_deploy

sasobadovinac/meshlab/.github/actions/2_deploy

The open source mesh processing system

3/10
yonasbsd/deno/.github/mtime_cache

yonasbsd/deno/.github/mtime_cache

A modern runtime for JavaScript and TypeScript.

5/10
Maintained action available
step-security/goreleaser-action

step-security/goreleaser-action

GitHub Action for GoReleaser. Secure drop-in replacement for goreleaser/goreleaser-action.

8/10
Maintained by StepSecurity
uffizzicloud/update-preview-action

uffizzicloud/update-preview-action

GitHub Action to update a preview generated by the Uffizzi engine

3/10
h0x0er/secure-workflows/kbanalysis

h0x0er/secure-workflows/kbanalysis

Secure workflows using GitHub Actions Security Knowledge Base

3/10
aerospike/aerospike-jdbc/.github/actions/stage-release-artifacts

aerospike/aerospike-jdbc/.github/actions/stage-release-artifacts

Minimalist JDBC driver for Aerospike

8/10
kong/auto-author-assign

kong/auto-author-assign

GitHub Actions: Automatically assign pull request authors.

2/10
actions/ai-inference

actions/ai-inference

An action for calling AI models with GitHub Models

8/10
mdjahid11978-design/next.js-1/.github/actions/setup-datadog-ci

mdjahid11978-design/next.js-1/.github/actions/setup-datadog-ci

The React Framework

2/10
olafurpg/setup-scala

olafurpg/setup-scala

GitHub Action to install any version of Java (GraalVM, Java 8, Java 11, Java 14, ...) via Jabba. Works for any JVM language including Java, Scala and Kotlin.

3/10
modeseven-lfreleng-actions/repository-metadata-action

modeseven-lfreleng-actions/repository-metadata-action

Gathers metadata about the Github repository for use in other actions

5/10
Maintained action available
ministryofjustice/laa-ccms-common-workflows/.github/actions/pact-can-i-deploy

ministryofjustice/laa-ccms-common-workflows/.github/actions/pact-can-i-deploy

Common GitHub actions and workflows used by LAA CCMS projects.

7/10
microsoft/install-databricks-cli

microsoft/install-databricks-cli

GitHub Action that installs Databricks CLI

5/10
step-security/docker-build-push-action/_next/static/chunks/81577-7f2b838595480576.js

step-security/docker-build-push-action/_next/static/chunks/81577-7f2b838595480576.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

10/10
nvidia/nemo-flow/.github/actions/load-ci-tool-versions

nvidia/nemo-flow/.github/actions/load-ci-tool-versions

Multi-language agent runtime for execution scope management, lifecycle events, and middleware on tool and LLM calls.

6/10
pulumi/esc-action

pulumi/esc-action

Access environment variables from your Pulumi ESC environment in GitHub Actions

5/10
Maintained action available
wallies/ansible-lint-action

wallies/ansible-lint-action

GitHub Action for running ansible-lint as part of your workflows

5/10
ivuorinen/actions/sync-labels

ivuorinen/actions/sync-labels

ivuorinen's shared actions

7/10