StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

eliashaeussler/phpstan-src/.github/actions/downgrade-code

eliashaeussler/phpstan-src/.github/actions/downgrade-code

PHPStan's source code. This is where development happens. Check https://github.com/phpstan/phpstan for the distribution repository.

2/10
quarylabs/install-sqruff-cli-action

quarylabs/install-sqruff-cli-action

GitHub Action to install sqruff

2/10
fortify/github-action/fod-export

fortify/github-action/fod-export

Fortify GitHub Actions

2/10
Maintained action available
step-security/setup-bun/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/setup-bun/__builder_checkout_dir__/.github/actions/secure-download-artifact

Set up your GitHub Actions workflow with a specific version of Bun. Secure drop-in replacement for oven-sh/setup-bun.

10/10
caffeelake/godot/.github/actions/godot-cache-restore

caffeelake/godot/.github/actions/godot-cache-restore

Godot Engine โ€“ Multi-platform 2D and 3D game engine

3/10
Maintained action available
shubham-stepsecurity/harden-runner

shubham-stepsecurity/harden-runner

Network egress filtering and runtime security for GitHub-hosted and self-hosted runners

3/10
secureblue/bootc-integration-test-action

secureblue/bootc-integration-test-action

This action runs integration tests against any bootable container image.

6/10
linode/packer-plugin-linode/integration-release-action

linode/packer-plugin-linode/integration-release-action

Packer plugin for Linode Builder

5/10
Maintained action available
thejeff77/action-bump-semver

thejeff77/action-bump-semver

โซ GitHub Action to bump the semver version up

2/10
step-integration-tests/auto-pdpr-test-25038-11/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-25038-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
envoyproxy/toolshed/actions/github/artifact/download

envoyproxy/toolshed/actions/github/artifact/download

7/10
elastic/apm-agent-java/.github/workflows/unstash

elastic/apm-agent-java/.github/workflows/unstash

8/10
chainguard-images/actions/apko-publish

chainguard-images/actions/apko-publish

GitHub actions for the chainguard-images

8/10
yonasbsd/affine/.github/actions/public-layout.tsx

yonasbsd/affine/.github/actions/public-layout.tsx

There can be more than Notion and Miro. AFFiNE is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

4/10
Maintained action available
zdurham/s3-upload-github-action

zdurham/s3-upload-github-action

Upload github action for sending files to s3

3/10
xt0rted/stylelint-problem-matcher

xt0rted/stylelint-problem-matcher

A GitHub Action that registers a problem matcher for Stylelint's report format

2/10
sonarsource/sonar-scanner-maven/.github/actions/orchestrator-cache

sonarsource/sonar-scanner-maven/.github/actions/orchestrator-cache

SonarQube Scanner for Maven

7/10
nvidia/skyhook-packages/.github/actions/fill

nvidia/skyhook-packages/.github/actions/fill

Packages for the Skyhook Kubernetes Operator.

8/10
abcxyz/actions/.github/actions/load-workflow-variables

abcxyz/actions/.github/actions/load-workflow-variables

A collection of github actions and workflows.

5/10
step-security/setup-yq/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/setup-yq/__builder_checkout_dir__/.github/actions/secure-download-artifact

Sets up YQ, yet-another-markup-language-query-er, for use in your Github Actions workflow. Secure drop-in replacement for chrisdickinson/setup-yq.

8/10