StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/setup-qemu-action/_next/static/chunks/28513-d176af46a7084b66.js

step-security/setup-qemu-action/_next/static/chunks/28513-d176af46a7084b66.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

8/10
metamask/github-tools/.github/actions/update-release-changelog

metamask/github-tools/.github/actions/update-release-changelog

An assortment of tools interacting with the GitHub API to get metrics for things like PR review comments/reviews

5/10
Maintained action available
clickhouse/checkout

clickhouse/checkout

Wrapper around actions/checkout for flexible tuning

4/10
aerospike/aerospike-jdbc/.github/actions/image

aerospike/aerospike-jdbc/.github/actions/image

Minimalist JDBC driver for Aerospike

7/10
jianlins/llama.cpp/.github/actions/windows-setup-cuda

jianlins/llama.cpp/.github/actions/windows-setup-cuda

LLM inference in C/C++

5/10
Maintained action available
openai/openai-python/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

openai/openai-python/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

The official Python library for the OpenAI API

8/10
grafana/plugin-ci-workflows/actions/plugins/docs/publish

grafana/plugin-ci-workflows/actions/plugins/docs/publish

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10
ministryofjustice/laa-data-claims-reporting-service/.github/fill

ministryofjustice/laa-data-claims-reporting-service/.github/fill

Java service to generate claims reports

8/10
grafana/shared-workflows/actions/trigger-argo-workflow

grafana/shared-workflows/actions/trigger-argo-workflow

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

7/10
dustin4444/gemini-cli/.github/actions/create-pull-request

dustin4444/gemini-cli/.github/actions/create-pull-request

An open-source AI agent that brings the power of Gemini directly into your terminal.

5/10
Maintained action available
grafana/community-contributions/.github/actions/external-pr-validation/post-validation-comment

grafana/community-contributions/.github/actions/external-pr-validation/post-validation-comment

External contributor PR workflow testing sandbox

2/10
step-security/sccache-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/sccache-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

sccache github action. Secure drop-in replacement for Mozilla-Actions/sccache-action.

9/10
danger/swift

danger/swift

โš ๏ธ Stop saying "you forgot to โ€ฆ" in code review

4/10
erpc/erpc

erpc/erpc

eRPC โ€” fault-tolerant evm rpc proxy

4/10
Maintained action available
bubkoo/auto-comment

bubkoo/auto-comment

๐Ÿ’ฌ Automatically comment issues or PRs on events triggered

2/10
stacklet/superset/.github/actions/pr-lint-action

stacklet/superset/.github/actions/pr-lint-action

Apache Superset is a Data Visualization and Data Exploration Platform

5/10
aquaproj/aqua-installer

aquaproj/aqua-installer

Install aqua securely and quickly

7/10
jessehouwing/actions-example-checker

jessehouwing/actions-example-checker

Ensures examples match implementation

4/10
Maintained action available
yonasbsd/tempo/actions/metrics-collector

yonasbsd/tempo/actions/metrics-collector

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

4/10
Maintained action available
coveo/plasma/.github/actions/cleanup-demo

coveo/plasma/.github/actions/cleanup-demo

Plasma components implemented with React!

5/10
Maintained action available