Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/ansible-galaxy-action

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10

Maintained by StepSecurity

open-telemetry/assign-reviewers-action

GitHub action to assign reviewers/approvers/etc based on configuration

4/10

ledgerhq/ledger-live/tools/actions/composites/duplicate-avd

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10

Maintained action available

kong/gh-storage/public-layout.tsx

Use a GitHub hosted repository to store and retrieve files

3/10

liquibase-github-actions/flow

🚨 DEPRECATED - Use liquibase/setup-liquibase | Official GitHub Action to run Liquibase Flow

3/10

step-security/snyk-actions/__builder_checkout_dir__/.github/actions/privacy-check

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10

oxidize-rb/actions/setup-ruby-and-rust

4/10

step-security/github-api-commit-action/__builder_checkout_dir__/.github/actions/image

Commits changes to the repository through the Github api instead of traditional git commands. Secure drop-in replacement for grafana/github-api-commit-action.

10/10

step-security/create-issue-from-file/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub action to create an issue using content from a file. Secure drop-in replacement for peter-evans/create-issue-from-file.

9/10

github/gh-aw/actions/setup-cli

GitHub Agentic Workflows

6/10

greenled/no-merge-commits-check

Action for checking no merge commits are present in a pull request

3/10

kong/jdx-mise-action

Mirror of https://github.com/jdx/mise-action, for CI consumers of https://github.com/marketplace/actions/mise-action.

2/10

actions/download-artifact

5/10

step-security/conditional-build-matrix/__builder_checkout_dir__/.github/actions/image

A GitHub Action that enables easier conditional matrix builds!. Secure drop-in replacement for JoshuaTheMiller/conditional-build-matrix.

10/10

rapidsai/shared-actions/dockerhub-script

6/10

ministryofjustice/laa-data-claims-api/.github/actions/get_release_name_to_delete

LAA Data Claims API

8/10

ministryofjustice/hmpps-assess-risks-and-needs-github-actions/.github/actions/cypress/merge_timings

Reusable Github workflows and actions across the ARNS space (bootstrapped 2025-02-24)

3/10

aerospike/aerospike-client-java-reactive/.github/actions/fill

Reactive programming interfaces for the Aerospike Java client

6/10

step-security/junit-upload-github-action

GitHub Action to Upload JunitXML files to Test Optimization. Secure drop-in replacement for DataDog/junit-upload-github-action.

10/10

Maintained by StepSecurity

yonasbsd/codeql/.github/actions/public-layout.tsx

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

3/10

Maintained action available