StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

minicli/action-contributors

minicli/action-contributors

GitHub Action to dynamically update CONTRIBUTORS file

3/10
slashgear/action-check-pr-title

slashgear/action-check-pr-title

Github action to check Pull Request title based on JS Regexp This action in really simple and use Github Action core library base on event of your pull requests No need to install anything on your runner to use it. Simple, fast, reliable ๐ŸŽ‰

3/10
firedancer-io/radiance/.github/actions/fill

firedancer-io/radiance/.github/actions/fill

Solana protocol playground supporting Firedancer development

0/10
kong/slsa-generator/.github/actions/generate-builder

kong/slsa-generator/.github/actions/generate-builder

Language-agnostic SLSA provenance generation for Github Actions

3/10
ericcornelissen/odgen-action/all

ericcornelissen/odgen-action/all

A GitHub Action for ODGen

5/10
sasobadovinac/occt/.github/actions/cmake-build-basic

sasobadovinac/occt/.github/actions/cmake-build-basic

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

3/10
kubernetes-sigs/kubebuilder-release-tools

kubernetes-sigs/kubebuilder-release-tools

Release tooling for KubeBuilder projects.

4/10
chainguard-actions/thollander-actions-comment-pull-request

chainguard-actions/thollander-actions-comment-pull-request

2/10
dekinderfiets/pr-description-enforcer

dekinderfiets/pr-description-enforcer

2/10
yonasbsd/loki/lib/actions/%22https%3a/goreportcard.com/report/github.com/grafana/loki/%22/u003e/u003cimg

yonasbsd/loki/lib/actions/%22https%3a/goreportcard.com/report/github.com/grafana/loki/%22/u003e/u003cimg

Like Prometheus, but for logs.

3/10
Maintained action available
medyagh/info-block

medyagh/info-block

Print machine/os info before running your job

2/10
jonathancombs782/copilotforxcode/.github/actions/fill

jonathancombs782/copilotforxcode/.github/actions/fill

AI coding assistant for Xcode

3/10
step-security/github-action-aerospike/_next/static/chunks/52206-c3a78c17c6739a35.js

step-security/github-action-aerospike/_next/static/chunks/52206-c3a78c17c6739a35.js

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

10/10
reactive-firewall/python-bandit-scan

reactive-firewall/python-bandit-scan

GitHub Action for Python Bandit SAST

3/10
shivammathur/setup-php/sitemap.xml

shivammathur/setup-php/sitemap.xml

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

8/10
yuya-takeyama/monotonix/actions/load-jobs

yuya-takeyama/monotonix/actions/load-jobs

Make deployment monotonous

4/10
Maintained action available
docker/bake-action/subaction/fill

docker/bake-action/subaction/fill

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
sonarsource/sonar-java-symbolic-execution/.actions/get-build-number

sonarsource/sonar-java-symbolic-execution/.actions/get-build-number

Sonar Java symbolic execution plugin

6/10
n24q02m/better-semantic-release/publish-action

n24q02m/better-semantic-release/publish-action

Drop-in python-semantic-release fork with built-in release-safety guards (orphan-tag + registry-collision).

6/10
jimver/cuda-toolkit

jimver/cuda-toolkit

GitHub Action to install CUDA

5/10