StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

github/copilot-cli

github/copilot-cli

GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.

6/10
creshpay/action-gpg

creshpay/action-gpg

Github Action to enable GPG signature within Github Action Workflows

4/10
gradle/gradle-enterprise-build-validation-scripts/.github/actions/gradle/experiment-3

gradle/gradle-enterprise-build-validation-scripts/.github/actions/gradle/experiment-3

Executable scripts to assist in validating that your Gradle and Maven builds are in an optimal state in terms of maximizing work avoidance when using Develocity.

7/10
digitalkaoz/ecs-deployment-log-action

digitalkaoz/ecs-deployment-log-action

ECS Deployment Log Github Action

3/10
yonasbsd/dragonfly/.github/actions/sync-valkey-tests

yonasbsd/dragonfly/.github/actions/sync-valkey-tests

A modern replacement for Redis and Memcached

2/10
Maintained action available
sonarsource/gh-action_cache/credential-guard

sonarsource/gh-action_cache/credential-guard

GitHub action for caching in AWS S3

6/10
andybelltree/lcov-reporter-action

andybelltree/lcov-reporter-action

Comments a pull request with the code coverage generated by your tests.

2/10
phpstan/build-infection/build-infection/.github/actions/setup-php

phpstan/build-infection/build-infection/.github/actions/setup-php

7/10
release-plz/git-config

release-plz/git-config

GitHub action to configure the git user from a GitHub token

3/10
arqu/action-ansible-playbook

arqu/action-ansible-playbook

:gear: A GitHub Action for running Ansible playbooks

3/10
elastic/oblt-actions/updatecli/install

elastic/oblt-actions/updatecli/install

6/10
gittools/cicd/choco-creds

gittools/cicd/choco-creds

Common GitHub action that can be re-used across GitTools repositories

5/10
Maintained action available
step-security/cosign-installer/__builder_checkout_dir__/.github/actions/privacy-check

step-security/cosign-installer/__builder_checkout_dir__/.github/actions/privacy-check

Cosign Github Action. Secure drop-in replacement for sigstore/cosign-installer.

10/10
sonarsource/sonarjs/.github/actions/maven-cache

sonarsource/sonarjs/.github/actions/maven-cache

SonarSource Static Analyzer for JavaScript and TypeScript

4/10
Maintained action available
eliashaeussler/phpstan-src/build-infection/.github/actions/fill

eliashaeussler/phpstan-src/build-infection/.github/actions/fill

PHPStan's source code. This is where development happens. Check https://github.com/phpstan/phpstan for the distribution repository.

2/10
elastic/kibana/actions/permission-check

elastic/kibana/actions/permission-check

Your window into all of your data

4/10
Maintained action available
equinor/fusion-project-portal/.github/actions/client-test-coverage

equinor/fusion-project-portal/.github/actions/client-test-coverage

Project Portal powered By Fusion

4/10
step-integration-tests/auto-pdpr-test-88355-11/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88355-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/iggy/.github/actions/python-maturin/fill

yonasbsd/iggy/.github/actions/python-maturin/fill

Iggy is the persistent message streaming platform written in Rust, supporting QUIC, TCP and HTTP transport protocols, capable of processing millions of messages per second.

3/10
Maintained action available
home-assistant/builder/actions/publish-multi-arch-manifest

home-assistant/builder/actions/publish-multi-arch-manifest

Home Assistant builder script

7/10