StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

ministryofjustice/laa-data-claims-reporting-service/.github/get_release_name

ministryofjustice/laa-data-claims-reporting-service/.github/get_release_name

Java service to generate claims reports

8/10
alstr/todo-to-issue-action

alstr/todo-to-issue-action

Action that converts TODO comments to GitHub issues on push.

5/10
nvidia/aicr/.github/actions/sbom-and-attest

nvidia/aicr/.github/actions/sbom-and-attest

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

7/10
testlabtools/predict

testlabtools/predict

Predict CI results

4/10
ministryofjustice/github-actions/code-formatter

ministryofjustice/github-actions/code-formatter

A collection of reusable GitHub Actions for the Ministry of Justice, designed to streamline and enhance workflows across our projects. โ€ข This repository is defined and managed in Terraform

6/10
eclipse-zenoh/ci/public-layout.tsx

eclipse-zenoh/ci/public-layout.tsx

GitHub Actions and workflows used across eclipse-zenoh

4/10
Maintained action available
grafana/plugin-ci-workflows/actions/internal/plugins/setup

grafana/plugin-ci-workflows/actions/internal/plugins/setup

Re-usable GitHub Actions workflows for building, testing, releasing and deploying plugins

5/10
Maintained action available
grafana/security-github-actions/trivy

grafana/security-github-actions/trivy

Repo for Security related GitHub Actions CI automation

8/10
step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/compute-sha256

step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/compute-sha256

Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.

9/10
oxidecomputer/actions-rs_toolchain

oxidecomputer/actions-rs_toolchain

๐Ÿ› ๏ธ GitHub Action for `rustup` commands

0/10
step-security/action-semantic-demo

step-security/action-semantic-demo

Secure drop-in replacement for step-security/jest-coverage-action-demo

7/10
devantler-tech/ksail/.github/actions/ksail-cluster

devantler-tech/ksail/.github/actions/ksail-cluster

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
grafana/x-ray-datasource/actions/commands

grafana/x-ray-datasource/actions/commands

Grafana data source plugin for querying AWS X-Ray / AWS Application Signals

7/10
nv-gha-runners/setup-artifactory-go-proxy

nv-gha-runners/setup-artifactory-go-proxy

4/10
selfxyz/self/.github/actions/check-nested-requires

selfxyz/self/.github/actions/check-nested-requires

Prove your self

2/10
Maintained action available
navikt/automerge-dependabot

navikt/automerge-dependabot

This action automatically merges pull requests created by Dependabot with a set of configurable rules.

6/10
step-security/add-pr-comment/_next/static/chunks/54511-223fffa5f06b2071.js

step-security/add-pr-comment/_next/static/chunks/54511-223fffa5f06b2071.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
pytorch/torchrec/test-infra/.github/actions/setup-ssh

pytorch/torchrec/test-infra/.github/actions/setup-ssh

Pytorch domain library for recommendation systems

3/10
Maintained action available
pandoc/actions/image

pandoc/actions/image

3/10
pytorch/executorch/test-infra/.github/actions/upload-artifact-s3

pytorch/executorch/test-infra/.github/actions/upload-artifact-s3

On-device AI across mobile, embedded and edge for PyTorch

2/10
Maintained action available