StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

lcarva/review-rot-action/run

lcarva/review-rot-action/run

GitHub actions for review-rot

3/10
ministryofjustice/hmpps-community-payback-ui/.github/actions/slack_failure_notification

ministryofjustice/hmpps-community-payback-ui/.github/actions/slack_failure_notification

UI for community payback (bootstrapped 2025-08-15)

8/10
suzuki-shunsuke/github-action-renovate-config-validator

suzuki-shunsuke/github-action-renovate-config-validator

GitHub Actions for renovate-config-validator

6/10
jasonn3/build-container-installer

jasonn3/build-container-installer

Creates an ISO for installing a container image as an OS

5/10
Maintained action available
kritsanan1/attest-build-provenance

kritsanan1/attest-build-provenance

Action for generating build provenance attestations for workflow artifacts

2/10
yonasbsd/neon/.github/actions/image

yonasbsd/neon/.github/actions/image

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

2/10
dsanders11/project-actions/copy-project

dsanders11/project-actions/copy-project

A collection of actions for automating GitHub projects

3/10
Maintained action available
triaxtec/github-actions/python/public-layout.tsx

triaxtec/github-actions/python/public-layout.tsx

A collection of reusable actions used in our projects

3/10
sailpoint-oss/github-spectral-action

sailpoint-oss/github-spectral-action

A Github Action that will take in the changed files from a pull request and create a error report as a comment on the PR.

2/10
stuyarrow/publish-release

stuyarrow/publish-release

Github action to publish a draft release

2/10
step-security/create-or-update-comment/__builder_checkout_dir__/.github/actions/privacy-check

step-security/create-or-update-comment/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub action to create or update an issue or pull request comment. Secure drop-in replacement for peter-evans/create-or-update-comment.

8/10
bridgecrewio/bridgecrew-action

bridgecrewio/bridgecrew-action

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

3/10
step-security/terraform-cloud-provider-publish/__builder_checkout_dir__/.github/actions/fill

step-security/terraform-cloud-provider-publish/__builder_checkout_dir__/.github/actions/fill

An action for publishing terraform providers to a private registry. Secure drop-in replacement for thechrisjohnson/terraform-cloud-provider-publish.

8/10
launchdarkly/roku-client-sdk/.github/actions/publish

launchdarkly/roku-client-sdk/.github/actions/publish

LaunchDarkly Client-side SDK for Roku (Brightscript)

6/10
superfly/flyctl-actions

superfly/flyctl-actions

:octocat: GitHub Action that wraps the flyctl

4/10
aabed/slack-file-upload-action

aabed/slack-file-upload-action

This action uploads file to slack

0/10
step-security/snyk-actions/python

step-security/snyk-actions/python

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
port-labs/ocean-sail

port-labs/ocean-sail

3/10
pandaswhocode/initialize-github-job

pandaswhocode/initialize-github-job

Common steps for initializing a job for GitHub actions

6/10
jofthev/docs/.github/actions/precompute-pageinfo

jofthev/docs/.github/actions/precompute-pageinfo

The open-source repo for docs.github.com

0/10