StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

orcid-dev/orcid_dev-source-cache-action

orcid-dev/orcid_dev-source-cache-action

2/10
jun3453/slack-pr-open-notification-action

jun3453/slack-pr-open-notification-action

Use github actions to notify slack that a pull request has been opened.

2/10
sonarsource/sonar-classloader/.actions/get-build-number

sonarsource/sonar-classloader/.actions/get-build-number

Toolbox for Java classloaders

6/10
step-security/action-download-artifact/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-download-artifact/__builder_checkout_dir__/.github/actions/secure-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

9/10
chainguard-actions/github-codeql-action/init

chainguard-actions/github-codeql-action/init

4/10
Maintained action available
slidoapp/xcresulttool

slidoapp/xcresulttool

A GitHub Action that generates a human-readable test report from the Xcode result bundle and shows it on GitHub Checks.

4/10
politicalsphere/ci/.github/actions/jscpd

politicalsphere/ci/.github/actions/jscpd

CI/CD pipelines and GitHub Actions for Political Sphere

2/10
step-security/gh-action-pypi-publish/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

step-security/gh-action-pypi-publish/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish. Secure drop-in replacement for pypa/gh-action-pypi-publish.

10/10
nvidia-rtx/godot/.github/actions/public-layout.tsx

nvidia-rtx/godot/.github/actions/public-layout.tsx

NVIDIA fork of Godot Engine โ€“ Multi-platform 2D and 3D game engine

3/10
Maintained action available
launchdarkly/go-server-sdk-redis-redigo/.github/actions/coverage

launchdarkly/go-server-sdk-redis-redigo/.github/actions/coverage

Redis integration for the LaunchDarkly SDK for Server-side Go (with Redigo client)

5/10
Maintained action available
kafkasl/delete_from_another_repo

kafkasl/delete_from_another_repo

Github action to delete path from another repository

3/10
matbour/setup-sentry-cli

matbour/setup-sentry-cli

Setup the Sentry CLI in GitHub Actions

2/10
qetza/replacetokens-action

qetza/replacetokens-action

An action to replace tokens in text files with variables and/or secrets.

2/10
clowdhaus/terraform-composite-actions/directories%40v1.4.1

clowdhaus/terraform-composite-actions/directories%40v1.4.1

Contains composit GitHub actions for use with Terraform AWS Module workflows

4/10
ava-labs/avalanchego/.github/actions/run-monitored-tmpnet-cmd

ava-labs/avalanchego/.github/actions/run-monitored-tmpnet-cmd

Go implementation of an Avalanche node.

8/10
vsoch/spack-package-action/fill

vsoch/spack-package-action/fill

A set of GitHub actions to install spack, build and deploy a spack binary, or a spack container (under development).

0/10
step-security/docker-build-push-action/_next/static/chunks/polyfills-42372ed130431b0a.js

step-security/docker-build-push-action/_next/static/chunks/polyfills-42372ed130431b0a.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10
step-security/publish-to-bcr/__builder_checkout_dir__/.github/actions/privacy-check

step-security/publish-to-bcr/__builder_checkout_dir__/.github/actions/privacy-check

GitHub release automation for publishing modules to the Bazel Central Registry. Secure drop-in replacement for bazel-contrib/publish-to-bcr.

9/10
ministryofjustice/laa-data-claims-reporting-service/.github/cleanup_branch

ministryofjustice/laa-data-claims-reporting-service/.github/cleanup_branch

Java service to generate claims reports

8/10
launchdarkly/go-server-sdk-evaluation/.github/actions/image

launchdarkly/go-server-sdk-evaluation/.github/actions/image

Feature flag evaluation engine used in go-server-sdk

5/10