StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

max-frank/github-api-commit-action

max-frank/github-api-commit-action

Commits changes to the repository through the Github api instead of traditional git commands.

3/10
yonasbsd/cargo-binstall/.github/actions/just-setup

yonasbsd/cargo-binstall/.github/actions/just-setup

Binary installation for rust projects

4/10
Maintained action available
deepcode-ai/codeql/.github/actions/os-version

deepcode-ai/codeql/.github/actions/os-version

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

2/10
devantler-tech/actions/setup-go-toolchain

devantler-tech/actions/setup-go-toolchain

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
greenbone/actions/setup-pontos

greenbone/actions/setup-pontos

GitHub Actions for Greenbone projects

8/10
bolshakov/ruby/.github/actions/setup/ubuntu

bolshakov/ruby/.github/actions/setup/ubuntu

The Ruby Programming Language

3/10
wyozi/contextual-qa-checklist-action

wyozi/contextual-qa-checklist-action

Github action for filename-based QA checklists in PRs

0/10
step-security/setup-buildx-action/_next/static/chunks/71064-4c3dc9733edd7ebb.js

step-security/setup-buildx-action/_next/static/chunks/71064-4c3dc9733edd7ebb.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

8/10
kong/release-action

kong/release-action

An action which manages a github release

2/10
mobilefirstllc/cws-publish

mobilefirstllc/cws-publish

CI package for programmatically uploading extensions to Chrome Web Store

2/10
suzuki-shunsuke/watch-star-action

suzuki-shunsuke/watch-star-action

Notify your repository's stars to GitHub Issues

4/10
launchdarkly/rust-server-sdk-evaluation/.github/actions/tooling

launchdarkly/rust-server-sdk-evaluation/.github/actions/tooling

Types and eval logic for LaunchDarkly Rust SDKs

5/10
aerospike/aerospike-client-java-sdk/.github/actions/stage-release-artifacts

aerospike/aerospike-client-java-sdk/.github/actions/stage-release-artifacts

Aerospike Java Client

6/10
sonarsource/release-github-actions/image

sonarsource/release-github-actions/image

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

6/10
ministryofjustice/laa-claim-for-payment/.github/actions/deploy

ministryofjustice/laa-claim-for-payment/.github/actions/deploy

E2E Transformation provider claim service and api

8/10
ludy87/action/pr-issues-title-check

ludy87/action/pr-issues-title-check

Actions yaml

4/10
Maintained action available
imaralabs-ai/coder/.github/actions/embedded-pg-cache/download

imaralabs-ai/coder/.github/actions/embedded-pg-cache/download

Secure environments for developers and their agents

4/10
chronograph-pe/required-labels

chronograph-pe/required-labels

Fail the build if/unless a certain combination of labels are applied to a pull request

2/10
kong/sticky-pull-request-comment

kong/sticky-pull-request-comment

create comment on pull request, if exists update that comment.

2/10
dustin4444/gemini-cli/.github/actions/tag-npm-release

dustin4444/gemini-cli/.github/actions/tag-npm-release

An open-source AI agent that brings the power of Gemini directly into your terminal.

5/10
Maintained action available