StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

docker/bake-action/n8xda7/qqq/fill

docker/bake-action/n8xda7/qqq/fill

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
lfit/releng-reusable-workflows/.github/actions/git-commit-message-action

lfit/releng-reusable-workflows/.github/actions/git-commit-message-action

Reusuable workflows developed by LF Release Engineering

7/10
autowarefoundation/autoware-github-actions/set-git-config

autowarefoundation/autoware-github-actions/set-git-config

4/10
step-integration-tests/auto-pdpr-test-02968-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-02968-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/posthog/.github/actions/get-pr-labels

yonasbsd/posthog/.github/actions/get-pr-labels

๐Ÿฆ” PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.

2/10
Maintained action available
open-telemetry/opentelemetry-ruby-contrib/.github/actions/test_gem

open-telemetry/opentelemetry-ruby-contrib/.github/actions/test_gem

Contrib Packages for the OpenTelemetry Ruby API and SDK implementation.

7/10
caffeelake/alloy/.github/actions/homebrew-bump-formula

caffeelake/alloy/.github/actions/homebrew-bump-formula

OpenTelemetry Collector distribution with programmable pipelines

3/10
Maintained action available
qsadyysy786-tech/gemini-cli/.github/actions/create-pull-request

qsadyysy786-tech/gemini-cli/.github/actions/create-pull-request

An open-source AI agent that brings the power of Gemini directly into your terminal.

3/10
continuousauth/action

continuousauth/action

1/10
nvidia/nautobot-app-nvdatamodels/.github/actions/setup-environment

nvidia/nautobot-app-nvdatamodels/.github/actions/setup-environment

A Nautobot plugin which provides data models for NVIDIA products

5/10
facebook/dotslash-publish-release

facebook/dotslash-publish-release

Create DotSlash files for GitHub releases

5/10
step-security/google-github-auth/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/google-github-auth/__builder_checkout_dir__/.github/actions/public-layout.tsx

A GitHub Action for authenticating to Google Cloud. Secure drop-in replacement for google-github-actions/auth.

9/10
step-security/actions/whereami

step-security/actions/whereami

A collection of reusable Github Actions workflows.

7/10
cclauss/github-action-for-pytest

cclauss/github-action-for-pytest

A GitHub Action to run a pytest command when new code is pushed into your repo

3/10
approved-3rd-party-actions/sticky-pull-request-comment

approved-3rd-party-actions/sticky-pull-request-comment

create comment on pull request, if exists update that comment.

2/10
step-security/asdf-vm-actions/__builder_checkout_dir__/.github/actions/privacy-check

step-security/asdf-vm-actions/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Actions for the asdf version manager. Secure drop-in replacement for asdf-vm/actions.

10/10
wei/curl

wei/curl

Wraps the curl CLI to be used in Github Actions

3/10
verity-org/verity/.github/actions/upload-pages-artifact

verity-org/verity/.github/actions/upload-pages-artifact

5/10
Maintained action available
angular/dev-infra/github-actions/labeling/issue

angular/dev-infra/github-actions/labeling/issue

Angular Development Infrastructure

6/10
flathub-infra/flatpak-github-actions/fill

flathub-infra/flatpak-github-actions/fill

2/10