Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

cyber-dojo/pinned-checkout

Composite actions/checkout pinned to v6 commit

3/10

elastic/oblt-actions/oblt-cli/cluster-credentials

5/10

Maintained action available

statsig-io/statsig-publish-sdk-action/python

1/10

accuknox/report-action

Github actions to trigger report generation for runtime security.

3/10

check-spelling/check-spelling/../check-spelling-actions/upload-sarif

Spelling checker action to check spelling in repositories / pull requests / commits

5/10

invisirisk/pse-action

5/10

Maintained action available

datadog/install-datadog-ci-github-action

5/10

step-security/octocov-action

:octocat: GitHub Action for octocov. Secure drop-in replacement for k1LoW/octocov-action.

10/10

Maintained by StepSecurity

grafana/github-actions-testrepo/actions/image

5/10

iflow-ai/iflow-cli-action

Automate software development tasks within your GitHub repositories with iFlow CLI and AI ecosystem. https://github.com/iflow-ai/iflow-cli

3/10

step-integration-tests/auto-pdpr-test-74755-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10

zachkklein/wcag_pr_checker

Detect accessibility regressions between your PR and main -- Jumbohack 2026 AI Track Winner

2/10

secretonline/minecraft-actions/fill

A collection of GitHub actions to aid in mod and modpack development for Minecraft

2/10

Maintained action available

step-security/setup-swift/.ref-download-test

GitHub Action to setup Swift environment. Secure drop-in replacement for SwiftyLab/setup-swift.

10/10

tomasreyes/maui/.github/actions/triage-labels

.NET MAUI is the .NET Multi-platform App UI, a framework for building native device applications spanning mobile, tablet, and desktop.

7/10

step-security/setup-bazelisk

Set up your GitHub Actions workflow with a specific version of Bazelisk. Secure drop-in replacement for bazelbuild/setup-bazelisk.

8/10

Maintained by StepSecurity

bibipkins/dotnet-test-reporter

A GitHub action to parse test results and post the summary as a PR comment

3/10

chainguard-images/actions/apko-build

GitHub actions for the chainguard-images

8/10

suzuki-shunsuke/tfaction/tfmigrate-plan

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

5/10

Maintained action available

step-security/slack-github-action/sidebar.tsx

Send data into Slack using this GitHub Action!. Secure drop-in replacement for slackapi/slack-github-action.

10/10