StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

equinor/fusion-project-portal/.github/actions/client-build

equinor/fusion-project-portal/.github/actions/client-build

Project Portal powered By Fusion

4/10
grafana/plugin-ci-workflows/actions/plugins/trufflehog

grafana/plugin-ci-workflows/actions/plugins/trufflehog

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10
step-integration-tests/auto-pdpr-test-38516-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-38516-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
grafana/github-sync

grafana/github-sync

โคต๏ธ A GitHub Action for syncing current repository with remote

6/10
aws-actions/aws-lambda-deploy

aws-actions/aws-lambda-deploy

Deploys a Lambda function.

5/10
aws-actions/aws-codebuild-run-build

aws-actions/aws-codebuild-run-build

Run an AWS CodeBuild project as a step in a GitHub Actions workflow job.

5/10
sonarsource/release-github-actions/fill

sonarsource/release-github-actions/fill

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10
olegtarasov/get-tag

olegtarasov/get-tag

A GitHub action that gets current tag name and puts it into an environment variable

3/10
cybernop/push-fsh-profiles

cybernop/push-fsh-profiles

3/10
step-security/allcheckspassed/__builder_checkout_dir__/.github/actions/privacy-check

step-security/allcheckspassed/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to confirm that all checks reported on a commit have passed. Secure drop-in replacement for wechuli/allcheckspassed.

8/10
anthonyharrison/sbom4python

anthonyharrison/sbom4python

A tool to generate a SBOM (Software Bill of Materials) for an installed Python module

3/10
rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem-ci-result

rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem-ci-result

Rstack Ecosystem CI

4/10
Maintained action available
pre-commit/pre-commit-hooks

pre-commit/pre-commit-hooks

Some out-of-the-box hooks for pre-commit

7/10
nvidia/megatron-lm/.github/actions/check-nvidia-sso-membership

nvidia/megatron-lm/.github/actions/check-nvidia-sso-membership

Ongoing research training transformer models at scale

4/10
Maintained action available
edera-dev/actions/configure-azure-sccache

edera-dev/actions/configure-azure-sccache

Shared GitHub Actions Repo

4/10
Maintained action available
kong/slsa-generator/__builder_checkout_dir__/.github/actions/generate-attestations

kong/slsa-generator/__builder_checkout_dir__/.github/actions/generate-attestations

Language-agnostic SLSA provenance generation for Github Actions

3/10
yaoyorozu-hi/sekisho

yaoyorozu-hi/sekisho

้–ขๆ‰€ โ€” hardened release gate for tsukai-mcp Rust crates: a minimal, audited, SHA-pinned reusable publish workflow (crates.io Trusted Publishing via OIDC).

4/10
aerospike/aerospike-client-go/.github/actions/single-node-sc-cluster

aerospike/aerospike-client-go/.github/actions/single-node-sc-cluster

Aerospike Client Go

4/10
step-integration-tests/auto-pdpr-test-61883-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-61883-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
tomasreyes/kafka/.github/actions/gh-api-approve-run

tomasreyes/kafka/.github/actions/gh-api-approve-run

Mirror of Apache Kafka

5/10
Maintained action available