StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

fossifyorg/.github/.github/actions/decode-secrets

fossifyorg/.github/.github/actions/decode-secrets

6/10
dustin4444/oss-directory/main/.github/workflows/validate

dustin4444/oss-directory/main/.github/workflows/validate

A curated directory of open source software (OSS) projects and their associated artifacts

5/10
Maintained action available
rstackjs/rspack-toolchain/.rspack-toolchain/image

rstackjs/rspack-toolchain/.rspack-toolchain/image

A collection of reusable GitHub Actions for building and distributing Rspack native bindings across multiple platforms.

3/10
milhy545/coder/.github/actions/setup-go-tools

milhy545/coder/.github/actions/setup-go-tools

Secure environments for developers and their agents

4/10
ericcornelissen/tool-versions-update-action

ericcornelissen/tool-versions-update-action

A GitHub Action to automatically update the tools in your .tool-versions file

7/10
aerospike/aerospike-client-java/.github/actions/publish-to-sonatype

aerospike/aerospike-client-java/.github/actions/publish-to-sonatype

Aerospike Java Client Library

6/10
azure/k8s-set-context

azure/k8s-set-context

GitHub Action for setting context and retrieving Kubeconfig before deploying to Kubernetes clusters

9/10
cloudposse/github-action-secret-outputs

cloudposse/github-action-secret-outputs

Allow to pass a secret or masked variable between jobs in GitHub Actions using outputs.

6/10
nownick/pr-template-validator

nownick/pr-template-validator

Pull Request content validation

2/10
scylladb/goimports-action

scylladb/goimports-action

Ready to use go imports GitHub action

3/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/stefanzweifel-git-auto-commit-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/stefanzweifel-git-auto-commit-action

fork of https://github.com/stefanzweifel/git-auto-commit-action.git

5/10
step-security/cysharp-actions/__builder_checkout_dir__/.github/actions/fill

step-security/cysharp-actions/__builder_checkout_dir__/.github/actions/fill

Secure drop-in replacement for Cysharp/Actions.

10/10
iterative/setup-cml

iterative/setup-cml

GitHub Action for CML setup

3/10
step-integration-tests/auto-pdpr-test-88903-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88903-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
stainless-api/retrieve-github-access-token

stainless-api/retrieve-github-access-token

Github Action to retrieve a github access token

2/10
sonarsource/ci-github-actions/report-ci-metrics

sonarsource/ci-github-actions/report-ci-metrics

CI/CD GitHub Actions

6/10
pytorch/executorch/test-infra/.github/actions/public-layout.tsx

pytorch/executorch/test-infra/.github/actions/public-layout.tsx

On-device AI across mobile, embedded and edge for PyTorch

2/10
Maintained action available
chainguard-actions/codecov-codecov-action

chainguard-actions/codecov-codecov-action

3/10
Maintained action available
actions-security-demo/script-injection/.github/actions/website-sync

actions-security-demo/script-injection/.github/actions/website-sync

2/10
lfreleng-actions/node-audit-action

lfreleng-actions/node-audit-action

Audits Node.js projects for security issues

4/10