StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

eclipse-zenoh/ci/public-layout.tsx

eclipse-zenoh/ci/public-layout.tsx

GitHub Actions and workflows used across eclipse-zenoh

4/10
grafana/plugin-ci-workflows/actions/internal/plugins/setup

grafana/plugin-ci-workflows/actions/internal/plugins/setup

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

6/10
grafana/security-github-actions/trivy

grafana/security-github-actions/trivy

Repo for Security related GitHub Actions CI automation

8/10
step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/compute-sha256

step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/compute-sha256

Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.

8/10
oxidecomputer/actions-rs_toolchain

oxidecomputer/actions-rs_toolchain

๐Ÿ› ๏ธ GitHub Action for `rustup` commands

2/10
step-security/action-semantic-demo

step-security/action-semantic-demo

7/10
devantler-tech/ksail/.github/actions/ksail-cluster

devantler-tech/ksail/.github/actions/ksail-cluster

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
grafana/x-ray-datasource/actions/commands

grafana/x-ray-datasource/actions/commands

Grafana data source plugin for querying AWS X-Ray / AWS Application Signals

7/10
nv-gha-runners/setup-artifactory-go-proxy

nv-gha-runners/setup-artifactory-go-proxy

4/10
selfxyz/self/.github/actions/check-nested-requires

selfxyz/self/.github/actions/check-nested-requires

Prove your self

2/10
Maintained action available
navikt/automerge-dependabot

navikt/automerge-dependabot

This action automatically merges pull requests created by Dependabot with a set of configurable rules.

6/10
step-security/add-pr-comment/_next/static/chunks/54511-223fffa5f06b2071.js

step-security/add-pr-comment/_next/static/chunks/54511-223fffa5f06b2071.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
pytorch/torchrec/test-infra/.github/actions/setup-ssh

pytorch/torchrec/test-infra/.github/actions/setup-ssh

Pytorch domain library for recommendation systems

3/10
Maintained action available
pandoc/actions/image

pandoc/actions/image

3/10
pytorch/executorch/test-infra/.github/actions/upload-artifact-s3

pytorch/executorch/test-infra/.github/actions/upload-artifact-s3

On-device AI across mobile, embedded and edge for PyTorch

2/10
Maintained action available
red-gate/flyway-actions/migrations/deploy

red-gate/flyway-actions/migrations/deploy

Official Redgate Actions: Set up, check, and deploy changes with Redgate Flyway

7/10
grafana/mimir-loki/lib/actions/should-release

grafana/mimir-loki/lib/actions/should-release

Like Prometheus, but for logs.

2/10
pi-top/git-debian-changelog-bump-action

pi-top/git-debian-changelog-bump-action

0/10
yonasbsd/wazuh/.github/actions/vulnerability_scanner/compile

yonasbsd/wazuh/.github/actions/vulnerability_scanner/compile

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10
Maintained action available
nvidia/cuda-quantum/.github/actions/run-in-docker

nvidia/cuda-quantum/.github/actions/run-in-docker

C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows

8/10