StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/allcheckspassed/__builder_checkout_dir__/.github/actions/privacy-check

step-security/allcheckspassed/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to confirm that all checks reported on a commit have passed. Secure drop-in replacement for wechuli/allcheckspassed.

8/10
sozercan/kaito/.github/actions/fill

sozercan/kaito/.github/actions/fill

Kubernetes AI Toolchain Operator

2/10
step-integration-tests/auto-pdpr-test-42825-11/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-42825-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
anthonyharrison/sbom4python

anthonyharrison/sbom4python

A tool to generate a SBOM (Software Bill of Materials) for an installed Python module

2/10
rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem-ci-result

rstackjs/rstack-ecosystem-ci/.github/actions/ecosystem-ci-result

Rstack Ecosystem CI

4/10
Maintained action available
pre-commit/pre-commit-hooks

pre-commit/pre-commit-hooks

Some out-of-the-box hooks for pre-commit

7/10
nvidia/megatron-lm/.github/actions/check-nvidia-sso-membership

nvidia/megatron-lm/.github/actions/check-nvidia-sso-membership

Ongoing research training transformer models at scale

4/10
Maintained action available
edera-dev/actions/configure-azure-sccache

edera-dev/actions/configure-azure-sccache

Shared GitHub Actions Repo

4/10
Maintained action available
step-integration-tests/auto-pdpr-test-61350-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-61350-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
kong/slsa-generator/__builder_checkout_dir__/.github/actions/generate-attestations

kong/slsa-generator/__builder_checkout_dir__/.github/actions/generate-attestations

Language-agnostic SLSA provenance generation for Github Actions

3/10
yaoyorozu-hi/sekisho

yaoyorozu-hi/sekisho

้–ขๆ‰€ โ€” hardened release gate for tsukai-mcp Rust crates: a minimal, audited, SHA-pinned reusable publish workflow (crates.io Trusted Publishing via OIDC).

4/10
aerospike/aerospike-client-go/.github/actions/single-node-sc-cluster

aerospike/aerospike-client-go/.github/actions/single-node-sc-cluster

Aerospike Client Go

5/10
Maintained action available
step-integration-tests/auto-pdpr-test-61883-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-61883-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
tomasreyes/kafka/.github/actions/gh-api-approve-run

tomasreyes/kafka/.github/actions/gh-api-approve-run

Mirror of Apache Kafka

5/10
Maintained action available
abatilo/release-info-action

abatilo/release-info-action

Get the latest release of some GitHub repository

4/10
m-s-abeer/update-gha-summary-with-workflow-inputs

m-s-abeer/update-gha-summary-with-workflow-inputs

This A GitHub Action that automatically creates a formatted table of all workflow_dispatch input parameters in your workflow summary.

3/10
yorifuji/easy-vrt/fill

yorifuji/easy-vrt/fill

GitHub Action that simplifies visual regression testing by providing a workflow template

2/10
wendbv/calver-tag-action

wendbv/calver-tag-action

0/10
checkmarx/dustilock

checkmarx/dustilock

DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.

6/10
step-security/run-vcpkg/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/run-vcpkg/__builder_checkout_dir__/.github/actions/secure-download-artifact

The GitHub Action to setup vcpkg for your C++ based projects. Stores built ports using Binary Caching backed onto GH Cache. Secure drop-in replacement for lukka/run-vcpkg.

8/10