StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

raj-stepsecurity/jest-coverage-action-demo

raj-stepsecurity/jest-coverage-action-demo

5/10
pse-wtag/java-ci-cd-template/.github/actions/java-setup

pse-wtag/java-ci-cd-template/.github/actions/java-setup

A Centralized CICD for Java Spring Boot application

3/10
dsanders11/project-actions/link-project

dsanders11/project-actions/link-project

A collection of actions for automating GitHub projects

5/10
Maintained action available
sasobadovinac/meshlab/.github/actions/public-layout.tsx

sasobadovinac/meshlab/.github/actions/public-layout.tsx

The open source mesh processing system

3/10
step-security/replacetokens-action/__builder_checkout_dir__/.github/actions/fill

step-security/replacetokens-action/__builder_checkout_dir__/.github/actions/fill

An action to replace tokens in text files with variables and/or secrets. Secure drop-in replacement for qetza/replacetokens-action.

10/10
step-security/run-vcpkg

step-security/run-vcpkg

The GitHub Action to setup vcpkg for your C++ based projects. Stores built ports using Binary Caching backed onto GH Cache. Secure drop-in replacement for lukka/run-vcpkg.

8/10
Maintained by StepSecurity
cilium/scale-tests-action/export-results

cilium/scale-tests-action/export-results

Repository that hosts the GitHub action to run scale tests

4/10
Maintained action available
yonasbsd/linkerd2/.github/actions/helm-publish

yonasbsd/linkerd2/.github/actions/helm-publish

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

5/10
Maintained action available
sgammon/slsa-github-generator/actions/generator/generic/create-base64-subjects-from-file

sgammon/slsa-github-generator/actions/generator/generic/create-base64-subjects-from-file

Language-agnostic SLSA provenance generation for Github Actions

3/10
aerospike/aerospike-client-java/.github/actions/run-ee-server

aerospike/aerospike-client-java/.github/actions/run-ee-server

Aerospike Java Client Library

5/10
step-security/trufflehog-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/trufflehog-action/__builder_checkout_dir__/.github/actions/privacy-check

Find, verify, and analyze leaked credentials. Secure drop-in replacement for trufflesecurity/trufflehog.

10/10
jahid11978/openclaw-2d108f14/.ci-harness/.github/actions/setup-android-toolchain

jahid11978/openclaw-2d108f14/.ci-harness/.github/actions/setup-android-toolchain

Your own personal AI assistant. Any OS. Any Platform. The lobster way.own by jahid

4/10
Maintained action available
aerospike/aerospike-client-go/.github/actions/image

aerospike/aerospike-client-go/.github/actions/image

Aerospike Client Go

5/10
Maintained action available
ministryofjustice/opg-github-actions/actions/github-deploy-key

ministryofjustice/opg-github-actions/actions/github-deploy-key

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

6/10
adrise/matter-casting/.github/actions/git-safe-directory

adrise/matter-casting/.github/actions/git-safe-directory

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10
fastly/compute-actions/setup

fastly/compute-actions/setup

GitHub Actions for building on Fastly Compute.

7/10
ds0440/harden-runner

ds0440/harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

3/10
samjaninf/vitess/.github/actions/setup-go

samjaninf/vitess/.github/actions/setup-go

Vitess is a database clustering system for horizontal scaling of MySQL.

7/10
memospot/action-dagger

memospot/action-dagger

Enhanced Dagger GitHub Action

4/10
Maintained action available
neondatabase/neon/.github/actions/neon-branch-create

neondatabase/neon/.github/actions/neon-branch-create

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, code-like database branching, and scale to zero.

3/10