StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

carlosperate/arm-none-eabi-gcc-action

carlosperate/arm-none-eabi-gcc-action

GitHub Action to set-up the `arm-none-eabi-gcc` GNU Arm Embedded Toolchain.

5/10
Maintained action available
ministryofjustice/laa_govuk_notify_orchestrator/.github/actions/integration-tests

ministryofjustice/laa_govuk_notify_orchestrator/.github/actions/integration-tests

API used for Email orchestration between CLA services and GOV.UK Notify

7/10
cybernop/build-fhir-profiles

cybernop/build-fhir-profiles

github Action and Docker image to build FHIR profiles using FSH Sushi

3/10
nvidia/cccl/.github/actions/image

nvidia/cccl/.github/actions/image

CUDA Core Compute Libraries

7/10
hashicorp/actions-go-build/verify/self-test

hashicorp/actions-go-build/verify/self-test

Define a reproducible Go build.

4/10
step-security/zip-release/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/zip-release/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub action that can be used to create release zip archive. Secure drop-in replacement for TheDoctor0/zip-release.

10/10
paulushcgcj/delete-github-package

paulushcgcj/delete-github-package

2/10
tempoxyz/gh-actions/vendor/embarkstudios/cargo-deny-action

tempoxyz/gh-actions/vendor/embarkstudios/cargo-deny-action

Reusable GitHub Actions for Tempo

4/10
Maintained action available
rlespinasse/drawio-export-action

rlespinasse/drawio-export-action

GitHub Action To Export Draw.io Files

7/10
timothyjones/github-action-keep-node-current

timothyjones/github-action-keep-node-current

Keeps your repository's Node.js versions in sync with the official release schedule.

2/10
yonasbsd/iggy/.github/actions/node-npm/pre-merge

yonasbsd/iggy/.github/actions/node-npm/pre-merge

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

3/10
Maintained action available
caffeelake/arrow/arrow/.github/actions/image

caffeelake/arrow/arrow/.github/actions/image

Apache Arrow is the universal columnar format and multi-language toolbox for fast data interchange and in-memory analytics

3/10
Maintained action available
step-security/push-md-to-notion/__builder_checkout_dir__/.github/actions/privacy-check

step-security/push-md-to-notion/__builder_checkout_dir__/.github/actions/privacy-check

Push Markdown to Notion. Secure drop-in replacement for JoshStern/push-md-to-notion.

10/10
step-integration-tests/auto-pdpr-test-38516-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-38516-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
nvidia/tensorrt-llm/.github/actions/goggles_action/actions/llm_label

nvidia/tensorrt-llm/.github/actions/goggles_action/actions/llm_label

TensorRT LLM provides users with an easy-to-use Python API to define Large Language Models (LLMs) and supports state-of-the-art optimizations to perform inference efficiently on NVIDIA GPUs. TensorRT LLM also contains components to create Python and C++ runtimes that orchestrate the inference execution in a performant way.

4/10
Maintained action available
coveo/ui-kit/.github/actions/e2e-quantic-playwright

coveo/ui-kit/.github/actions/e2e-quantic-playwright

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
lumoin/trusted-devsecops/.github/actions/sign-artifact

lumoin/trusted-devsecops/.github/actions/sign-artifact

Reusable, security-critical DevSecOps workflows and tools for trusted open-source projects.

2/10
modeseven-lfreleng-actions/release-assets-action

modeseven-lfreleng-actions/release-assets-action

Uploads build artefacts and other workflow assets to a GitHub release

5/10
Maintained action available
step-security/commit-message-checker

step-security/commit-message-checker

GitHub Action that checks commit messages of pushes and pull request against a regex pattern. Secure drop-in replacement for gsactions/commit-message-checker.

9/10
Maintained by StepSecurity
step-security/setup-opentofu/__builder_checkout_dir__/.github/actions/image

step-security/setup-opentofu/__builder_checkout_dir__/.github/actions/image

Secure drop-in replacement for opentofu/setup-opentofu.

10/10