Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/readmeio-rdme

ReadMe's official command-line interface (CLI) and GitHub Action 🌊. Secure drop-in replacement for readmeio/rdme.

10/10

Maintained by StepSecurity

step-security/protobuf-ci/checkout

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10

Maintained by StepSecurity

nosense588/spring-boot/send-notification/.github/actions/fill

Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.

2/10

tempoxyz/gh-actions/vendor/dependabot/fetch-metadata

Reusable GitHub Actions for Tempo

4/10

Maintained action available

dflook/terraform-apply

GitHub action to apply terraform plans

3/10

openzeppelin/moonbeam/.github/workflow-templates/dev-tests

An Ethereum-compatible smart contract parachain on Polkadot

0/10

sonarsource/sonar-packaging-maven-plugin/.actions/config-maven

:package: Maven plugin for building SonarQube Server plugins

5/10

step-security/sbom-action/__builder_checkout_dir__/.github/actions/fill

GitHub Action for creating software bill of materials using Syft. Secure drop-in replacement for anchore/sbom-action.

9/10

ministryofjustice/hmpps-github-shared-actions/.github/actions/version_history

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10

step-security/zingdevlimited-actions-helpers/image

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks. Secure drop-in replacement for zingdevlimited/actions-helpers.

10/10

step-integration-tests/auto-pdpr-test-20996-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

jahid11978/openclaw/.github/actions/create-generated-pr-tokens

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

4/10

Maintained action available

step-integration-tests/auto-pdpr-test-57427-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

jfrog/.github/actions/install-go-with-cache

4/10

zedthree/clang-tidy-review/post

Create a pull request review based on clang-tidy warnings

3/10

ministryofjustice/cloud-platform-iam-policy-github-action

A GitHub Action used with Pull requests (PRs) on the MoJ Cloud Platform.

6/10

guyarb/golang-test-annotations

A github action which annotates failed tests.

3/10

launchdarkly/go-server-sdk/.github/actions/unit-tests

LaunchDarkly Server-side SDK for Go

5/10

Maintained action available

ljharb/actions/node/matrix

GitHub actions I use for CI.

5/10

Maintained action available

docker-compose-linter/dclint-github-action

GitHub Action for DCLint. Supports GitHub Annotations and integration with Reviewdog.

2/10