StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

yonasbsd/ribir/.github/actions/fill

yonasbsd/ribir/.github/actions/fill

Non-intrusive GUI framework for Rust/WASM

3/10
bokuweb/sakimori

bokuweb/sakimori

Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.

2/10
Maintained action available
openzeppelin/moonkit/.github/workflow-templates/public-layout.tsx

openzeppelin/moonkit/.github/workflow-templates/public-layout.tsx

Collection of open substrate pallets

2/10
launchdarkly/js-core/actions/run-example

launchdarkly/js-core/actions/run-example

LaunchDarkly monorepo for JavaScript SDKs

6/10
1password/load-secrets-action/image

1password/load-secrets-action/image

Load secrets from 1Password into your GitHub Actions jobs

4/10
Maintained action available
docker/setup-qemu-action

docker/setup-qemu-action

GitHub Action to install QEMU static binaries

8/10
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
op5dev/tf-via-pr

op5dev/tf-via-pr

Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.

6/10
mheap/github-action-required-labels

mheap/github-action-required-labels

Fail the build if/unless a certain combination of labels are applied to a pull request

3/10
nanasess/setup-chromedriver

nanasess/setup-chromedriver

ChromeDriver for use in GitHub Actions

6/10
scribemd/docker-cache

scribemd/docker-cache

Cache Docker Images Whether Built or Pulled

3/10
release-kit/semver

release-kit/semver

Parse semantic version from string or tag

2/10
peter-evans/create-issue-from-file

peter-evans/create-issue-from-file

A GitHub action to create an issue using content from a file

4/10
coveo/ui-kit/.github/actions/setup-sfdx

coveo/ui-kit/.github/actions/setup-sfdx

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
tannergolden/standards/actions/open-pr

tannergolden/standards/actions/open-pr

Reusable GitHub Actions workflows and composite actions for any language or toolchain. Called, never copied, so a fix lands once and reaches every repository pinned to it. Hardened CI, secret and dependency scanning, release automation, branch protection, and a shared label taxonomy.

5/10
koenrh/dnscontrol-action

koenrh/dnscontrol-action

Deploy your DNS configuration using GitHub Actions using DNSControl.

4/10
hashicorp/ghaction-import-gpg

hashicorp/ghaction-import-gpg

DEPRECATED - GitHub action to import GPG private key

6/10
andife/tensorflow-onnx/.github/actions/unit_test

andife/tensorflow-onnx/.github/actions/unit_test

Convert TensorFlow, Keras, Tensorflow.js and Tflite models to ONNX

3/10
mitchellh/vouch/action/manage-by-issue

mitchellh/vouch/action/manage-by-issue

A community trust management system based on explicit vouches to participate.

4/10
Maintained action available
asana/push-signed-commits

asana/push-signed-commits

This composite Github Action uses the createCommitOnBranch GraphQL mutation to allow Github Apps to push 'Verified' commits to Github.

3/10