StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/git-tag-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/git-tag-action/__builder_checkout_dir__/.github/actions/privacy-check

[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.

9/10
alexanderbarabanov/geti-ci/actions/collect-sbom-library

alexanderbarabanov/geti-ci/actions/collect-sbom-library

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

5/10
step-security/freebsd-vm

step-security/freebsd-vm

Use FreeBSD in github actions. Secure drop-in replacement for vmactions/freebsd-vm.

10/10
Maintained by StepSecurity
ministryofjustice/laa-certificated-fee-scheme-api/.github/actions/fill

ministryofjustice/laa-certificated-fee-scheme-api/.github/actions/fill

5/10
mdjahid11978-design/act/.github/actions/choco

mdjahid11978-design/act/.github/actions/choco

Run your GitHub Actions locally ๐Ÿš€

3/10
release-drafter/release-drafter/image

release-drafter/release-drafter/image

Drafts your next release notes as pull requests are merged into master.

4/10
Maintained action available
elementary/actions/gettext-template

elementary/actions/gettext-template

Reusable GitHub Actions for elementary apps

6/10
rudderlabs/airbyte/.github/actions/match-github-to-slack-user

rudderlabs/airbyte/.github/actions/match-github-to-slack-user

Airbyte is an open-source EL(T) platform that helps you replicate your data in your warehouses, lakes and databases.

1/10
tempoxyz/gh-actions/vendor/docker/build-push-action

tempoxyz/gh-actions/vendor/docker/build-push-action

Reusable GitHub Actions for Tempo

4/10
Maintained action available
openvex/setup-vexctl

openvex/setup-vexctl

VEXctl GitHub Action

5/10
ahmadnassri/action-dependabot-auto-merge

ahmadnassri/action-dependabot-auto-merge

Automatically merge Dependabot PRs when version comparison is within range

4/10
elide-dev/aura/.github/actions/public-layout.tsx

elide-dev/aura/.github/actions/public-layout.tsx

โŒฅ AI Coding agent for the terminal โ€” hash-anchored edits, optimized tool harness, LSP, Python, browser, subagents, and more

4/10
step-security/release-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/release-action/__builder_checkout_dir__/.github/actions/privacy-check

An action which manages a github release. Secure drop-in replacement for ncipollo/release-action.

10/10
step-security/dprint-check/__builder_checkout_dir__/.github/actions/privacy-check

step-security/dprint-check/__builder_checkout_dir__/.github/actions/privacy-check

GitHub action for running `dprint check`. Secure drop-in replacement for dprint/check.

10/10
cloudposse/github-action-docker-image-exists

cloudposse/github-action-docker-image-exists

Github Action check if Docker image exists by pulling it

5/10
hashicorp/actions-go-build/public-layout.tsx

hashicorp/actions-go-build/public-layout.tsx

Define a reproducible Go build.

4/10
step-integration-tests/auto-pdpr-test-57545-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-57545-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/dynamic-matrix

step-security/dynamic-matrix

Secure drop-in replacement for coactions/dynamic-matrix.

10/10
Maintained by StepSecurity
arcjet/arcjet-js/.github/actions/pin-npm

arcjet/arcjet-js/.github/actions/pin-npm

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.

6/10
autowarefoundation/autoware-github-actions/image

autowarefoundation/autoware-github-actions/image

6/10