StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

febiosoftware/febio-workflows/.github/actions/get-plugin-repos

febiosoftware/febio-workflows/.github/actions/get-plugin-repos

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

3/10
Maintained action available
step-security/setup-buildx-action/_next/static/chunks/87511-ea4d82de8f16d6ee.js

step-security/setup-buildx-action/_next/static/chunks/87511-ea4d82de8f16d6ee.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10
eliashaeussler/phpstan-src/build-infection/.github/actions/public-layout.tsx

eliashaeussler/phpstan-src/build-infection/.github/actions/public-layout.tsx

PHPStan's source code. This is where development happens. Check https://github.com/phpstan/phpstan for the distribution repository.

2/10
obmarg/action-graphql-introspect

obmarg/action-graphql-introspect

2/10
nodoubtz-record-label/cdp-sdk/.github/actions/fetch-docs-artifact

nodoubtz-record-label/cdp-sdk/.github/actions/fetch-docs-artifact

Client libraries for managing EVM and Solana wallets while relying on CDP to secure private keys.

4/10
chainguard-dev/melange/.github/actions/setup-bubblewrap

chainguard-dev/melange/.github/actions/setup-bubblewrap

build APKs from source code

7/10
coveo/semantic-monorepo-tools/.github/actions/public-layout.tsx

coveo/semantic-monorepo-tools/.github/actions/public-layout.tsx

A library of helper functions to do SemVer2 compliant releases from Conventional Commits in monorepos

5/10
Maintained action available
crytic/echidna-action

crytic/echidna-action

GitHub Action to run Echidna, the Ethereum smart contract fuzzer

5/10
enricomi/publish-unit-test-result-action/misc/action/json-output

enricomi/publish-unit-test-result-action/misc/action/json-output

GitHub Action to publish unit test results on GitHub

4/10
Maintained action available
nvidia/nemo-relay/source-checkout/.github/actions/load-ci-tool-versions

nvidia/nemo-relay/source-checkout/.github/actions/load-ci-tool-versions

Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.

6/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/docker-bake-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/docker-bake-action

Mirror from https://github.com/docker/bake-action

2/10
Maintained action available
step-security/gradle-dependency-submission/__builder_checkout_dir__/.github/actions/privacy-check

step-security/gradle-dependency-submission/__builder_checkout_dir__/.github/actions/privacy-check

Calculates dependencies for a Gradle build-target and submits the list to the Dependency Submission API. Secure drop-in replacement for mikepenz/gradle-dependency-submission.

10/10
hollowman6/sarif4reviewdog

hollowman6/sarif4reviewdog

Static Analysis Results Interchange Format (SARIF) support for reviewdog by converting it into Reviewdog Diagnostic Format (RDFormat)

3/10
sonarsource/sonar-flex/.actions/fill

sonarsource/sonar-flex/.actions/fill

6/10
backstage/actions/renovate-changesets

backstage/actions/renovate-changesets

Custom actions for automating Backstage workflows

3/10
yonasbsd/loki/actions/backport

yonasbsd/loki/actions/backport

Like Prometheus, but for logs.

3/10
Maintained action available
nvidia-nemo/megatron-bridge/fw-ci-templates/.github/actions/publish-docs

nvidia-nemo/megatron-bridge/fw-ci-templates/.github/actions/publish-docs

Training library for Megatron-based models with bidirectional Hugging Face conversion capability

7/10
ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/fill

ministryofjustice/hmpps-github-actions/.github/actions/build-test-and-deploy/fill

Github actions for HMPPS projects

6/10
launchdarkly/erlang-server-sdk/.github/actions/public-layout.tsx

launchdarkly/erlang-server-sdk/.github/actions/public-layout.tsx

LaunchDarkly Server-Side SDK for Erlang/Elixir

6/10
openai/gabriel/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

openai/gabriel/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

An official OpenAI toolkit for social scientists and data scientists to measure quantitative attributes in text, images, or audio using the GPT API.

3/10