StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

re-actors/checkout-python-sdist

re-actors/checkout-python-sdist

A GitHub Action to unpack a source distribution package (tarball / `.tar.gz`) into the current workspace

5/10
Maintained action available
fastai/workflows/public-layout.tsx

fastai/workflows/public-layout.tsx

Composite Actions workflows for use in fastai projects

2/10
Maintained action available
tempoxyz/mpp-tools/.github/actions/setup-conformance

tempoxyz/mpp-tools/.github/actions/setup-conformance

Tooling and test suites for managing MPP SDKs and other ecosystem primitives

6/10
elastic/oblt-actions/oblt-cli/setup

elastic/oblt-actions/oblt-cli/setup

6/10
celo-org/viem/.github/actions/fill

celo-org/viem/.github/actions/fill

TypeScript Interface for Ethereum

2/10
code-cargo/cargowall-action

code-cargo/cargowall-action

CargoWall Action to secure your GitHub Workflows

6/10
seanmiddleditch/gha-setup-ninja

seanmiddleditch/gha-setup-ninja

GitHub Action to install the ninja build tool to PATH

0/10
politicalsphere/ci/.github/actions/ps-task/trivy

politicalsphere/ci/.github/actions/ps-task/trivy

CI/CD pipelines and GitHub Actions for Political Sphere

2/10
openhands/extensions/plugins/pr-review

openhands/extensions/plugins/pr-review

Public registry for OpenHands extensions.

5/10
Maintained action available
slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout

slsa-framework/slsa-github-generator/.github/actions/secure-builder-checkout

Language-agnostic SLSA provenance generation for Github Actions

4/10
siemens/ix-starter/.github/workflows/actions/install

siemens/ix-starter/.github/workflows/actions/install

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

4/10
Maintained action available
pytorch/pytorch-integration-testing/test-infra/.github/actions/pull-docker-image

pytorch/pytorch-integration-testing/test-infra/.github/actions/pull-docker-image

Testing downstream libraries using pytorch release candidates

1/10
cpcloud/numba-cuda/.github/actions/image

cpcloud/numba-cuda/.github/actions/image

The CUDA target for Numba

3/10
step-security/ghaction-setup-docker/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/ghaction-setup-docker/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action to set up (download and install) Docker CE. Secure drop-in replacement for docker/setup-docker-action.

10/10
k-paxian/dart-package-publisher

k-paxian/dart-package-publisher

Action to Publish Dart / Flutter Package To https://pub.dev When you need to publish a package, just bump the version in pubspec.yaml

4/10
andife/openvino/openvino/.github/actions/cache

andife/openvino/openvino/.github/actions/cache

OpenVINOโ„ข is an open source toolkit for optimizing and deploying AI inference

3/10
launchdarkly/ldcli/.github/actions/publish

launchdarkly/ldcli/.github/actions/publish

The official command line interface for managing LaunchDarkly feature flags.

4/10
Maintained action available
timschoenle/actions/actions/helm/update-chart-version

timschoenle/actions/actions/helm/update-chart-version

Composite and Node GitHub Actions, reusable workflows and shared Renovate presets, each released under its own tag.

7/10
pytorch/test-infra/.github/actions/image

pytorch/test-infra/.github/actions/image

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10
Maintained action available
step-security/setup-qemu-action/_next/static/chunks/28513-d176af46a7084b66.js

step-security/setup-qemu-action/_next/static/chunks/28513-d176af46a7084b66.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

9/10