StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/ci-github-actions/pr_cleanup

sonarsource/ci-github-actions/pr_cleanup

CI/CD GitHub Actions

6/10
ministryofjustice/money-to-prisoners-start-page/.github/actions/fill

ministryofjustice/money-to-prisoners-start-page/.github/actions/fill

GOV.UK start page for Money to Prisoners

7/10
yokawasa/action-sqlcheck

yokawasa/action-sqlcheck

A GitHub Action that automatically identifies anti-patterns in SQL queries using sqlcheck when PR is requested. Please [✩Star] if you're using it!

4/10
lfreleng-actions/gerrit-review-action

lfreleng-actions/gerrit-review-action

GitHub Action for doing reviews on Gerrit systems

8/10
caffeelake/zed/.github/actions/check_style

caffeelake/zed/.github/actions/check_style

Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

2/10
Maintained action available
ledgerhq/ledger-live/tools/actions/change-product-name

ledgerhq/ledger-live/tools/actions/change-product-name

Mono-repository for Ledger Wallet apps and related packages

4/10
Maintained action available
step-security/add-pr-comment/_next/static/chunks/87511-ea4d82de8f16d6ee.js

step-security/add-pr-comment/_next/static/chunks/87511-ea4d82de8f16d6ee.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
grafana/shared-workflows/shared-workflows/actions/login-to-gar

grafana/shared-workflows/shared-workflows/actions/login-to-gar

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10
zingdevlimited/actions-helpers/update-flex-config

zingdevlimited/actions-helpers/update-flex-config

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks.

4/10
Maintained action available
dawidd6/action-get-tag

dawidd6/action-get-tag

:gear: A GitHub Action to get the pushed tag name

0/10
elastic/elastic-github-actions/fill

elastic/elastic-github-actions/fill

This action spins up an Elasticsearch instance that can be accessed and used in your subsequent steps.

6/10
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-slack-notification

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/runner-slack-notification

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

5/10
ministryofjustice/payforlegalaid-openapi/.github/build

ministryofjustice/payforlegalaid-openapi/.github/build

8/10
secretonline/secrets-pack/.github/actions/fill

secretonline/secrets-pack/.github/actions/fill

A modpack for technical players on Vanilla servers.

4/10
Maintained action available
launchdarkly/java-core/.github/actions/publish

launchdarkly/java-core/.github/actions/publish

LaunchDarkly monorepo for Java SDK packages

6/10
pytorch/pytorch/test-infra/.github/actions/export-matrix-variables

pytorch/pytorch/test-infra/.github/actions/export-matrix-variables

Tensors and Dynamic neural networks in Python with strong GPU acceleration

5/10
Maintained action available
step-security/nothing-but-nix/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/nothing-but-nix/__builder_checkout_dir__/.github/actions/public-layout.tsx

Create a 130GB Nix ️store in GitHub runners ❄️ Multi-partition BTRFS RAID-0 for /nix πŸ’ͺ Brutally purges unnecessary software πŸͺ“ Dynamically grows the Nix store πŸ“ˆ. Secure drop-in replacement for wimpysworld/nothing-but-nix.

10/10
equinor/lighthouse-client/.github/actions/pnpm-setup

equinor/lighthouse-client/.github/actions/pnpm-setup

WebClient for project Lighthouse

5/10
jahid11978/clawback/.github/actions/setup-node-env

jahid11978/clawback/.github/actions/setup-node-env

OpenClaw fork with Signal fixes + cherry-picked upstream improvements. Narf!

3/10
pytorch/ci-infra/.github/actions/osdc-setup

pytorch/ci-infra/.github/actions/osdc-setup

3/10
Maintained action available