StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

yonasbsd/teleport/.github/actions/image

yonasbsd/teleport/.github/actions/image

The easiest, most secure way to access infrastructure.

5/10
Maintained action available
fortify/github-action/internal/fod-logout

fortify/github-action/internal/fod-logout

Fortify GitHub Actions

1/10
elastic/docs-actions/docs-builder/preview/cleanup

elastic/docs-actions/docs-builder/preview/cleanup

5/10
Maintained action available
caffeelake/eqmonitor/.github/actions/fill

caffeelake/eqmonitor/.github/actions/fill

An earthquake monitoring Application

4/10
Maintained action available
edera-dev/sccache/.github/actions/artifact_failure

edera-dev/sccache/.github/actions/artifact_failure

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

2/10
tanker187/terraform/.github/actions/go-version

tanker187/terraform/.github/actions/go-version

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

2/10
space-wizards/submodule-dependency

space-wizards/submodule-dependency

GitHub action to checkout submodule changes that are required for a pull request

1/10
seemethere/download-artifact-s3

seemethere/download-artifact-s3

2/10
jahid11978/openclaw-2d108f14/workflow/.github/actions/setup-pnpm-store-cache

jahid11978/openclaw-2d108f14/workflow/.github/actions/setup-pnpm-store-cache

Your own personal AI assistant. Any OS. Any Platform. The lobster way.own by jahid

4/10
Maintained action available
estroz/rerun-actions

estroz/rerun-actions

A GitHub App that re-runs Action Workflows via PR comment commands.

3/10
yonasbsd/ribir/.github/actions/fill

yonasbsd/ribir/.github/actions/fill

Non-intrusive GUI framework for Rust/WASM

3/10
supplypike/setup-bin

supplypike/setup-bin

Add a binary to github action

3/10
bokuweb/sakimori

bokuweb/sakimori

Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.

2/10
Maintained action available
openzeppelin/moonkit/.github/workflow-templates/public-layout.tsx

openzeppelin/moonkit/.github/workflow-templates/public-layout.tsx

Collection of open substrate pallets

2/10
launchdarkly/js-core/actions/run-example

launchdarkly/js-core/actions/run-example

LaunchDarkly monorepo for JavaScript SDKs

6/10
1password/load-secrets-action/image

1password/load-secrets-action/image

Load secrets from 1Password into your GitHub Actions jobs

4/10
Maintained action available
docker/setup-qemu-action

docker/setup-qemu-action

GitHub Action to install QEMU static binaries

8/10
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-content

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
op5dev/tf-via-pr

op5dev/tf-via-pr

Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.

6/10
openzeppelin/role-manager/.github/actions/public-layout.tsx

openzeppelin/role-manager/.github/actions/public-layout.tsx

Manage OpenZeppelin Access Control contracts across multiple blockchains โ€” visualize roles, permissions, and execute admin actions.

6/10