StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

yonasbsd/buck2/.github/actions/build_bootstrap

yonasbsd/buck2/.github/actions/build_bootstrap

Build system, successor to Buck

3/10
Maintained action available
johnbeynon/render-deploy-action

johnbeynon/render-deploy-action

A Github Action for trigging a deploy of a Render service.

3/10
step-security/r-lib-actions/null

step-security/r-lib-actions/null

GitHub Actions for the R community. Secure drop-in replacement for r-lib/actions.

9/10
celestiaorg/.github/.github/actions/fill

celestiaorg/.github/.github/actions/fill

4/10
Maintained action available
githubsecuritylab/actions-permissions/advisor

githubsecuritylab/actions-permissions/advisor

GitHub token permissions Monitor and Advisor actions

2/10
kong/slsa-generator/__builder_checkout_dir__/.github/actions/compute-sha256

kong/slsa-generator/__builder_checkout_dir__/.github/actions/compute-sha256

Language-agnostic SLSA provenance generation for Github Actions

3/10
bazel-contrib/setup-bazel

bazel-contrib/setup-bazel

GitHub Action to configure Bazel

5/10
Maintained action available
laminas/documentation-theme/github-actions/public-layout.tsx

laminas/documentation-theme/github-actions/public-layout.tsx

Documentation theme for Laminas and Mezzio

3/10
microsoft/devskim-action

microsoft/devskim-action

The GitHub Action for DevSkim

7/10
datadog/integrations-core/core-temp/.github/actions/setup-test-target-scripts

datadog/integrations-core/core-temp/.github/actions/setup-test-target-scripts

Core integrations of the Datadog Agent

4/10
Maintained action available
ledgerhq/ledger-live/tools/actions/composites/aggregate-shard-results

ledgerhq/ledger-live/tools/actions/composites/aggregate-shard-results

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10
Maintained action available
nv-gha-runners/cuda-python/.github/actions/install_unix_deps

nv-gha-runners/cuda-python/.github/actions/install_unix_deps

CUDA Python: Performance meets Productivity

4/10
grafana/grafana-github-actions-go/bump-release

grafana/grafana-github-actions-go/bump-release

Grafana GitHub Actions in Golang

7/10
stefreak/ossf-scorecard-repro-2189/.github/actions/image

stefreak/ossf-scorecard-repro-2189/.github/actions/image

Reproduce bug https://github.com/ossf/scorecard/issues/2189

2/10
sonarsource/release-github-actions/get-jira-release-notes

sonarsource/release-github-actions/get-jira-release-notes

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10
fallow-rs/fallow

fallow-rs/fallow

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

6/10
pytorch/pytorch.github.io/test-infra/.github/actions/export-matrix-variables

pytorch/pytorch.github.io/test-infra/.github/actions/export-matrix-variables

The website for PyTorch

4/10
Maintained action available
step-security/protobuf-ci/null

step-security/protobuf-ci/null

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
domblack/github-release

domblack/github-release

Github Action to create, update, or add files to Github Releases

3/10
step-security/action-semantic-demo/public-layout.tsx

step-security/action-semantic-demo/public-layout.tsx

7/10