StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/sonarlint-core/gh-action_release/main

sonarsource/sonarlint-core/gh-action_release/main

Core library to run SonarQube for IDE analysis

7/10
beer-sakthai/sak-family-agent/.github/actions/setup-uv-python

beer-sakthai/sak-family-agent/.github/actions/setup-uv-python

Six AI agent personas (SakThai, SakKing, SakSee, SakSit, SakJules, SakTan) sharing one home β€” the main repository for the Sak-Family-Agent ecosystem. Built from a shelter in Cork with $0 budget.

4/10
Maintained action available
sbomify/sbomify-action

sbomify/sbomify-action

SBOM generation, enrichment, and management for CI/CD. CycloneDX & SPDX, from lockfiles or containers.

8/10
step-security/slsa-github-generator/.github/actions/secure-builder-checkout/_next/static/chunks/9484-c9215fa9b6fcf134.js

step-security/slsa-github-generator/.github/actions/secure-builder-checkout/_next/static/chunks/9484-c9215fa9b6fcf134.js

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
syphar/restore-pip-download-cache

syphar/restore-pip-download-cache

0/10
deliverybot/deployment-status

deliverybot/deployment-status

GitHub action for updating deployments with status events.

3/10
prowler-cloud/prowler/.github/actions/setup-python-uv

prowler-cloud/prowler/.github/actions/setup-python-uv

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

5/10
Maintained action available
step-security/setup-qemu-action/_next/static/chunks/78278-8878f2642e10241b.js

step-security/setup-qemu-action/_next/static/chunks/78278-8878f2642e10241b.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

9/10
kong/slsa-github-generator/.github/actions/secure-upload-folder

kong/slsa-github-generator/.github/actions/secure-upload-folder

Language-agnostic SLSA provenance generation for Github Actions

3/10
tanker187/stagehand/.github/actions/select-browserbase-region

tanker187/stagehand/.github/actions/select-browserbase-region

The AI Browser Automation Framework

5/10
Maintained action available
jey3dayo/pr-insights-labeler

jey3dayo/pr-insights-labeler

GitHub Action for PR file size and metrics checking

6/10
jahid11978/claude-agent-sdk-python/.github/actions/setup-claude-auth

jahid11978/claude-agent-sdk-python/.github/actions/setup-claude-auth

5/10
Maintained action available
bainss/remove-stale-branches

bainss/remove-stale-branches

Github action to remove stale branches

2/10
yonasbsd/slint/src/.github/actions/image

yonasbsd/slint/src/.github/actions/image

Slint is an open-source declarative GUI toolkit to build native user interfaces for Rust, C++, JavaScript, or Python apps.

4/10
Maintained action available
configcat/scan-repository

configcat/scan-repository

ConfigCat's repository scanner GitHub Action. ConfigCat is a hosted feature flag service: https://configcat.com. Manage feature toggles across frontend, backend, mobile, desktop apps. Alternative to LaunchDarkly. Management app + feature flag SDKs.

3/10
zavoloklom/shields/.github/actions/image

zavoloklom/shields/.github/actions/image

Concise, consistent, and legible badges in SVG and raster format

3/10
step-security/trufflehog-action

step-security/trufflehog-action

Find, verify, and analyze leaked credentials. Secure drop-in replacement for trufflesecurity/trufflehog.

10/10
Maintained by StepSecurity
step-security/docker-build-push-action/_next/static/chunks/60996-46ad4efc4ab03f23.js

step-security/docker-build-push-action/_next/static/chunks/60996-46ad4efc4ab03f23.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10
jahid11978/openclaw-local-test/.github/actions/fill

jahid11978/openclaw-local-test/.github/actions/fill

Test branch for OpenClaw PR's

4/10
Maintained action available
clowdhaus/terraform-composite-actions/directory

clowdhaus/terraform-composite-actions/directory

Contains composit GitHub actions for use with Terraform AWS Module workflows

4/10