StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

yonasbsd/quickwit/.github/actions/cross-build-binary

yonasbsd/quickwit/.github/actions/cross-build-binary

Sub-second search & analytics engine on cloud storage

5/10
Maintained action available
devantler-tech/ksail/.github/actions/restore-helm-cache

devantler-tech/ksail/.github/actions/restore-helm-cache

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
launchdarkly/cpp-sdks/.github/actions/cmake-test

launchdarkly/cpp-sdks/.github/actions/cmake-test

C++ Client/Server SDKs

6/10
step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/fill

step-security/actions-label-merge-conflict/__builder_checkout_dir__/.github/actions/fill

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

9/10
tonybaloney/pycharm-security

tonybaloney/pycharm-security

Finds security holes in your Python projects from PyCharm and GitHub

4/10
goccy/tobari-action/image

goccy/tobari-action/image

GitHub Actions for Tobari

4/10
wearerequired/lint-action

wearerequired/lint-action

✨ GitHub Action for detecting and auto-fixing lint errors

6/10
yonasbsd/dragonfly/.github/actions/regression-tests

yonasbsd/dragonfly/.github/actions/regression-tests

A modern replacement for Redis and Memcached

2/10
Maintained action available
reecetech/version-increment

reecetech/version-increment

GitHub Action that increments semver or calver versions based on git repository tags

4/10
engineerd/configurator

engineerd/configurator

Cross-platform GitHub Action to download, extract, and add to path statically compiled tools

2/10
rustdesk-org/run-on-arch-action

rustdesk-org/run-on-arch-action

A Github Action that executes jobs/commands on non-x86 cpu architectures (ARMv6, ARMv7, aarch64, s390x, ppc64le) via QEMU

3/10
huntridge-labs/argus/.github/actions/scanner-osv

huntridge-labs/argus/.github/actions/scanner-osv

Argus brings β€œa hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

5/10
Maintained action available
step-security/woke-action-reviewdog/__builder_checkout_dir__/.github/actions/privacy-check

step-security/woke-action-reviewdog/__builder_checkout_dir__/.github/actions/privacy-check

woke GitHub Action using reviewdog. Secure drop-in replacement for get-woke/woke-action-reviewdog.

10/10
fmulero/labeler

fmulero/labeler

0/10
dessant/reaction-comments

dessant/reaction-comments

πŸ‘ πŸ“¨ πŸ’” GitHub Action that deletes +1 comments

4/10
Maintained action available
ministryofjustice/laa-check-client-qualifies/.github/actions/delete-uat-release

ministryofjustice/laa-check-client-qualifies/.github/actions/delete-uat-release

CCQ - Check if your Client Qualifies for Legal Aid

8/10
openzeppelin/relayer-plugin-launchtube/.github/actions/prepare

openzeppelin/relayer-plugin-launchtube/.github/actions/prepare

Relayer plugin for launchtube

3/10
step-security/test-summary-action

step-security/test-summary-action

Show a helpful summary of test results in GitHub Actions CI/CD workflow runs. Secure drop-in replacement for test-summary/action.

8/10
Maintained by StepSecurity
mamezou-tech/setup-helmfile

mamezou-tech/setup-helmfile

Setup helmfile action

3/10
davidwengier/postadaptivecard

davidwengier/postadaptivecard

A GitHub Action that posts issue and pr details to any adaptive card webhook (eg, Teams)

3/10