StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/actions/setup-knative

step-security/actions/setup-knative

A collection of reusable Github Actions workflows.

7/10
brennhill/sloppy-joe

brennhill/sloppy-joe

Shields against supply-chain, slopsquatting, and typosquatting attacks from dependencies and code.

2/10
ministryofjustice/hmpps-probation-integration-services/.github/actions/setup-gradle

ministryofjustice/hmpps-probation-integration-services/.github/actions/setup-gradle

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10
netapp/cloudstack/.github/actions/install-nonoss

netapp/cloudstack/.github/actions/install-nonoss

Apache CloudStack is an opensource Infrastructure as a Service (IaaS) cloud computing platform

6/10
erayaha/anti-dark-pattern

erayaha/anti-dark-pattern

CI/CD linter that catches legally risky dark patterns in front-end code. Blocks deceptive UI before it ships.

2/10
Maintained action available
use-tusk/test-runner

use-tusk/test-runner

Run Tusk-generated tests via a GitHub Action runner

3/10
nvidia/tensorrt-incubator/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

nvidia/tensorrt-incubator/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

Experimental projects related to TensorRT

1/10
plbstl/first-contribution

plbstl/first-contribution

Automatically welcome first-time contributors on issues and pull requests

2/10
tbxark/docker-action

tbxark/docker-action

GitHub Action to build and push Docker images with Buildx

3/10
tempoxyz/gh-actions/vendor/helm/chart-testing-action

tempoxyz/gh-actions/vendor/helm/chart-testing-action

Reusable GitHub Actions for Tempo

4/10
Maintained action available
turbocoder13/py-lintro/.github/actions/fill

turbocoder13/py-lintro/.github/actions/fill

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

7/10
elastic/elastic-otel-java/.github/workflows/image

elastic/elastic-otel-java/.github/workflows/image

8/10
cardinalby/export-env-action

cardinalby/export-env-action

GitHub Action that exports .env file variables to job env

3/10
dustin4444/node-semver/.github/actions/create-check

dustin4444/node-semver/.github/actions/create-check

The semver parser for node (the one npm uses)

5/10
jj/pull-request-checks-action

jj/pull-request-checks-action

Returns an array of checked slots in the body of the pull request.

5/10
Maintained action available
devantler-tech/ksail/.github/actions/ksail-test-workload-watch

devantler-tech/ksail/.github/actions/ksail-test-workload-watch

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
ministryofjustice/opg-github-actions/actions/test-env

ministryofjustice/opg-github-actions/actions/test-env

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

6/10
step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/privacy-check

step-security/slsa-github-generator/__builder_checkout_dir__/.github/actions/privacy-check

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
actions-security-demo/pytorch/.github/actions/diskspace-cleanup

actions-security-demo/pytorch/.github/actions/diskspace-cleanup

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10
step-security/slsa-github-generator/.github/actions/secure-download-folder

step-security/slsa-github-generator/.github/actions/secure-download-folder

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
Maintained by StepSecurity