StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

magicproduct/packer-plugin-googlecompute/integration-release-action

magicproduct/packer-plugin-googlecompute/integration-release-action

Packer plugin for Google Compute Builder

4/10
Maintained action available
lfreleng-actions/log-publish-action

lfreleng-actions/log-publish-action

Publishes build logs and test reports to an S3 log server (JJB lf-infra-publish parity for GitHub Actions)

4/10
step-integration-tests/auto-pdpr-test-74755-6/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-74755-6/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
pytooling/actions/releaser

pytooling/actions/releaser

Reusable steps and workflows for GitHub Actions, focused on Python packages.

3/10
Maintained action available
appimagecrafters/build-appimage

appimagecrafters/build-appimage

GitHub Action for producing AppImages

3/10
step-security/github-action-benchmark

step-security/github-action-benchmark

GitHub Action for continuous benchmarking to keep performance. Secure drop-in replacement for benchmark-action/github-action-benchmark.

9/10
Maintained by StepSecurity
confidential-containers/guest-components/.github/actions/install-nvat-sdk

confidential-containers/guest-components/.github/actions/install-nvat-sdk

Confidential Containers Guest Tools and Components

6/10
step-security/docs-as-code-confluence/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/docs-as-code-confluence/__builder_checkout_dir__/.github/actions/secure-download-artifact

Publish the content of a folder to confluence Github Action. Secure drop-in replacement for Bhacaz/docs-as-code-confluence.

9/10
zacjw/markdown-html-action

zacjw/markdown-html-action

3/10
celo-org/viem/.github/actions/setup-wagmi

celo-org/viem/.github/actions/setup-wagmi

TypeScript Interface for Ethereum

2/10
nugine/setup-flatc

nugine/setup-flatc

Setup flatc for use in actions

3/10
servicenow/sncicd-plugin-activate

servicenow/sncicd-plugin-activate

2/10
nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-static-checks

nvidia/nemoclaw/.trusted-ci-actions/.github/actions/ci-static-checks

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
nvidia/cuda-quantum/.github/actions/wheel-source-hash

nvidia/cuda-quantum/.github/actions/wheel-source-hash

C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows

8/10
step-security/github-action-markdown-cli

step-security/github-action-markdown-cli

Style checking and linting for Markdown/CommonMark files. Secure drop-in replacement for nosborn/github-action-markdown-cli.

10/10
samsung/credsweeper

samsung/credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

7/10
stellar/actions/fill

stellar/actions/fill

GitHub Actions for Stellar repositories.

6/10
adrise/local-cache

adrise/local-cache

This action allows caching dependencies and build outputs to improve workflow execution time on self hosted machine.

2/10
huntridge-labs/argus/.github/actions/scanner-opengrep

huntridge-labs/argus/.github/actions/scanner-opengrep

Argus brings โ€œa hundred eyesโ€ to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
launchdarkly/dotnet-logging-adapter-commonlogging/.github/actions/ci

launchdarkly/dotnet-logging-adapter-commonlogging/.github/actions/ci

Adapter from LaunchDarkly.Logging API to Common.Logging

4/10