StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

raven-actions/debug

raven-actions/debug

๐Ÿฉบ Dump GitHub contexts and Runner environment, and post action webhook payloads to the SMEE.io

6/10
opslayertech/upload-s3-action

opslayertech/upload-s3-action

github action for upload to S3 โ˜๏ธ

1/10
lfreleng-actions/aislop-scan-action

lfreleng-actions/aislop-scan-action

AI slop / code quality scanning tool composite action

6/10
openzeppelin/tron-contracts/.github/actions/storage-layout

openzeppelin/tron-contracts/.github/actions/storage-layout

5/10
Maintained action available
aerospike/aerospike-client-csharp/.github/actions/build

aerospike/aerospike-client-csharp/.github/actions/build

Aerospike C# Client Library

4/10
tannergolden/standards/actions/image

tannergolden/standards/actions/image

Documented engineering standards, plus the reusable workflows and composite actions that enforce them for any toolchain. Called, never copied, so a fix lands once and reaches every repository.

5/10
chainguard-actions/oxsecurity-megalinter

chainguard-actions/oxsecurity-megalinter

2/10
jahid11978/openclaw/.ci-harness/.github/actions/setup-pnpm-store-cache

jahid11978/openclaw/.ci-harness/.github/actions/setup-pnpm-store-cache

Your own personal AI assistant. Any OS. Any Platform. The lobster way. ๐Ÿฆž

4/10
Maintained action available
yonasbsd/rocksdb/.github/actions/build-for-benchmarks

yonasbsd/rocksdb/.github/actions/build-for-benchmarks

A library that provides an embeddable, persistent key-value store for fast storage.

5/10
Maintained action available
actions-security-demo/script-injection/actions/metrics-collector

actions-security-demo/script-injection/actions/metrics-collector

2/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/tenable-terrascan-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/github/tenable-terrascan-action

Mirror from https://github.com/tenable/terrascan-action

3/10
slsa-framework/slsa-github-generator/.github/actions/create-container_based-predicate

slsa-framework/slsa-github-generator/.github/actions/create-container_based-predicate

Language-agnostic SLSA provenance generation for Github Actions

4/10
christian-draeger/write-properties

christian-draeger/write-properties

Github action to write java properties files

3/10
step-security/pip-action

step-security/pip-action

Github Action to install Pip packages. Secure drop-in replacement for BSFishy/pip-action.

10/10
Maintained by StepSecurity
wolfi-dev/actions/wolfictl-update-rm

wolfi-dev/actions/wolfictl-update-rm

A collection of reusable Github Actions workflows.

8/10
machine-learning-apps/actions-chatops

machine-learning-apps/actions-chatops

Actions That Enables ChatOps In a PR Through a GitHub App

0/10
step-security/action-swiftlint/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-swiftlint/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for SwiftLint. Secure drop-in replacement for norio-nomura/action-swiftlint.

10/10
shopware/github-actions/phpunit

shopware/github-actions/phpunit

Reuseable GitHub Actions Workflows

4/10
Maintained action available
stripe/openapi/actions/notify-release

stripe/openapi/actions/notify-release

An OpenAPI specification for the Stripe API.

8/10
firedancer-io/firedancer/.github/actions/hugepages

firedancer-io/firedancer/.github/actions/hugepages

Firedancer is Jump Crypto's Solana validator software.

5/10
Maintained action available