StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

centml/dynamo/.github/actions/compliance-scan

centml/dynamo/.github/actions/compliance-scan

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
step-security/action-ansible-playbook/__builder_checkout_dir__/.github/actions/privacy-check

step-security/action-ansible-playbook/__builder_checkout_dir__/.github/actions/privacy-check

:gear: A GitHub Action for running Ansible playbooks. Secure drop-in replacement for Arqu/action-ansible-playbook.

10/10
nvidia/onnxruntime/.github/actions/macos-ci-setup

nvidia/onnxruntime/.github/actions/macos-ci-setup

ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator

3/10
step-security/add-pr-comment/_next/static/chunks/94575-9eedcc18b016e8a8.js

step-security/add-pr-comment/_next/static/chunks/94575-9eedcc18b016e8a8.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
grafana/sigma-rule-deployment/actions/convert

grafana/sigma-rule-deployment/actions/convert

Automate the conversion and deployment of Sigma Rules to Grafana Alerting via GitHub Actions

7/10
dhth/composite-actions/.github/actions/lint-actions

dhth/composite-actions/.github/actions/lint-actions

2/10
smartcontractkit/push-gha-metrics-action

smartcontractkit/push-gha-metrics-action

3/10
mnrendra/jajal-docker2-action

mnrendra/jajal-docker2-action

4/10
aerospike/java-object-mapper/.github/actions/stage-release-artifacts

aerospike/java-object-mapper/.github/actions/stage-release-artifacts

The Java Object Mapper is a simple, light-weight framework used to map POJOs to the Aerospike database. Using simple annotations or a configuration YAML file to describe how to map the data to Aerospike, the project takes the tedium out of mapping the data through the powerful, low level interface.

6/10
coursgranja91-hash/erk/.github/actions/setup-python-uv

coursgranja91-hash/erk/.github/actions/setup-python-uv

erk is a tool for the orchestration and management of plan-oriented agentic engineering.

3/10
zlatko-ms/envarfiles

zlatko-ms/envarfiles

Loads GitHub env variables from JSON, YAML and Plain text files

4/10
mikefarah/yq

mikefarah/yq

yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor

9/10
ministryofjustice/analytical-platform-github-actions/image

ministryofjustice/analytical-platform-github-actions/image

Analytical Platform GitHub Actions โ€ข This repository is defined and managed in Terraform

8/10
home-assistant/builder

home-assistant/builder

Home Assistant builder script

8/10
nsphung/mcp-snowflake-server

nsphung/mcp-snowflake-server

MCP Snowflake Server NSP - A Snowflake MCP server โ€” SQL queries, schema exploration, and data insights for AI assistants

8/10
tanker187/node/node/.github/actions/install-clang

tanker187/node/node/.github/actions/install-clang

npm's fork of nodejs/node, for sending PRs to update deps/npm

3/10
chainguard-actions/actions-setup-go

chainguard-actions/actions-setup-go

3/10
Maintained action available
yonasbsd/testcontainers-node/.github/actions/docker-rootless-setup

yonasbsd/testcontainers-node/.github/actions/docker-rootless-setup

Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

3/10
Maintained action available
orq-ai/orq-python/image

orq-ai/orq-python/image

Build AI Applications from Playground to Production

2/10
Maintained action available
johnnymorganz/stylua-action

johnnymorganz/stylua-action

GitHub action for StyLua

3/10