StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

jphutchins/harden-runner

jphutchins/harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

3/10
step-integration-tests/auto-pdpr-test-81607-2/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-81607-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
canonical/actions/fill

canonical/actions/fill

Shared GitHub Actions

3/10
Maintained action available
pytorch/vision/test-infra/.github/actions/check-disk-space

pytorch/vision/test-infra/.github/actions/check-disk-space

Datasets, Transforms and Models specific to Computer Vision

4/10
Maintained action available
docker/docker-agent-action/setup-credentials

docker/docker-agent-action/setup-credentials

A GitHub Action for running Docker Agent AI agents in your workflows.

4/10
yonasbsd/next-auth/.github/version-pr

yonasbsd/next-auth/.github/version-pr

Authentication for the Web.

3/10
Maintained action available
rul1an/plimsoll-action

rul1an/plimsoll-action

Review what an AI agent release changed at runtime (files, network, MCP tools), gate the PR, and report findings in code scanning. For AI platform and security teams.

4/10
step-security/test-reporting/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/test-reporting/__builder_checkout_dir__/.github/actions/secure-download-artifact

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for phoenix-actions/test-reporting.

8/10
rasahq/rasa-sdk/.github/actions/debug-grpc

rasahq/rasa-sdk/.github/actions/debug-grpc

SDK for the development of custom actions for Rasa

6/10
iwamot/actions/release-publish

iwamot/actions/release-publish

iwamot's shared GitHub Actions composite actions.

6/10
checkmarxdev/cx-arch-llama-cpp/.github/actions/linux-setup-spacemit

checkmarxdev/cx-arch-llama-cpp/.github/actions/linux-setup-spacemit

LLM inference in C/C++

4/10
ministryofjustice/laa-submit-crime-forms/.github/actions/delete-dev-release

ministryofjustice/laa-submit-crime-forms/.github/actions/delete-dev-release

This is the repository for the replacement of services: Claim a non-standard magistrates' court payment and Apply for prior authority to incur disbursements

8/10
shogo82148/actions-upload-release-asset

shogo82148/actions-upload-release-asset

Yet Another Upload Release Asset Action

6/10
foxcorp/generate-github-app-token

foxcorp/generate-github-app-token

3/10
step-security/secrets-fetch-action

step-security/secrets-fetch-action

Securely inject Doppler secrets into your GitHub Actions. Secure drop-in replacement for DopplerHQ/secrets-fetch-action.

10/10
Maintained by StepSecurity
jannekem/run-python-script-action

jannekem/run-python-script-action

Write Python scripts in an Actions workflow file

3/10
reality2byte/action/analyze

reality2byte/action/analyze

5/10
Maintained action available
pcysl5edgo/create-unitypackage

pcysl5edgo/create-unitypackage

A GitHub Action that create unitypackage file without Unity Editor Installation.

3/10
kusaridev/kusari-cli/__builder_checkout_dir__/.github/actions/fill

kusaridev/kusari-cli/__builder_checkout_dir__/.github/actions/fill

Command line interface for Kusari

7/10
slsa-framework/slsa-github-generator/.github/actions/generate-builder

slsa-framework/slsa-github-generator/.github/actions/generate-builder

Language-agnostic SLSA provenance generation for Github Actions

4/10