StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/actions-oidc-debugger/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/actions-oidc-debugger/__builder_checkout_dir__/.github/actions/secure-download-artifact

An Action for printing OIDC claims in GitHub Actions. Secure drop-in replacement for github/actions-oidc-debugger.

10/10
eliashaeussler/gha/.github/actions/build-docs

eliashaeussler/gha/.github/actions/build-docs

๐ŸŒˆ Reusable GitHub Actions and Workflows for use in my personal projects

6/10
step-security/github-action-matrix-outputs-read/__builder_checkout_dir__/.github/actions/image

step-security/github-action-matrix-outputs-read/__builder_checkout_dir__/.github/actions/image

Workaround implementation - Read matrix jobs outputs. Secure drop-in replacement for GoCodeAlone/github-action-matrix-outputs-read.

10/10
step-security/publish-unit-test-result-action/misc/action/package-downloads

step-security/publish-unit-test-result-action/misc/action/package-downloads

GitHub Action to publish unit test results on GitHub. Secure drop-in replacement for EnricoMi/publish-unit-test-result-action.

8/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-33716-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-33716-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
sergioramos/yarn-actions/image

sergioramos/yarn-actions/image

GitHub Action for interacting with yarn

0/10
labmimors/dsh-mcp-lens

labmimors/dsh-mcp-lens

Search 1,000 MCP tools through two interfaces in DeepSeek Harness. Load exact schemas on demand and keep structured results usable across tool calls.

5/10
vmoens/test-infra/test-infra/.github/actions/calculate-docker-image

vmoens/test-infra/test-infra/.github/actions/calculate-docker-image

This repository hosts code that supports the testing infrastructure for the main PyTorch repo. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

0/10
step-security/create-pull-request/_next/static/chunks/82372-3e0f97fa2fb178cc.js

step-security/create-pull-request/_next/static/chunks/82372-3e0f97fa2fb178cc.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10
chainguard-actions/docker-setup-docker-action

chainguard-actions/docker-setup-docker-action

2/10
step-security/file-existence-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/file-existence-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

:file_folder: :octocat: GitHub Action to check for file existence. Secure drop-in replacement for andstor/file-existence-action.

10/10
sasobadovinac/gitea/.github/actions/fill

sasobadovinac/gitea/.github/actions/fill

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

3/10
nvidia/megatron-lm/fw-ci-templates/.github/actions/publish-docs

nvidia/megatron-lm/fw-ci-templates/.github/actions/publish-docs

Ongoing research training transformer models at scale

4/10
Maintained action available
google/oss-fuzz/infra/cifuzz/actions/build_fuzzers

google/oss-fuzz/infra/cifuzz/actions/build_fuzzers

OSS-Fuzz - continuous fuzzing for open source software.

8/10
robinraju/release-downloader

robinraju/release-downloader

Github action to download release assets from private or public repositories

7/10
qsadyysy786-tech/gemini-cli/.github/actions/publish-release

qsadyysy786-tech/gemini-cli/.github/actions/publish-release

An open-source AI agent that brings the power of Gemini directly into your terminal.

3/10
dustin4444/react-native/.github/actions/build-android

dustin4444/react-native/.github/actions/build-android

A framework for building native applications using React

3/10
jahid11978/openclaw-jahid/.github/actions/setup-pnpm-store-cache

jahid11978/openclaw-jahid/.github/actions/setup-pnpm-store-cache

Your own personal AI assistant. Any OS. Any Platform. The lobster way.own by jahid

3/10
athackst/htmlproofer-action

athackst/htmlproofer-action

Run htmlproofer on a directory. Defaults work with Github Pages.

5/10
Maintained action available
step-integration-tests/auto-pdpr-test-01868-8/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-01868-8/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10