StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.

9/10
testifysec/witness-run-action

testifysec/witness-run-action

2/10
kolide/expo-fork/.github/actions/use-android-emulator

kolide/expo-fork/.github/actions/use-android-emulator

Our fork of expo

3/10
step-security/install-datadog-ci-github-action

step-security/install-datadog-ci-github-action

Secure drop-in replacement for DataDog/install-datadog-ci-github-action.

10/10
iwamot/actions/go-publish

iwamot/actions/go-publish

iwamot's shared GitHub Actions composite actions.

5/10
hashicorp/tfc-workflows-github/actions/apply-run

hashicorp/tfc-workflows-github/actions/apply-run

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

7/10
yonasbsd/pest/.github/actions/%5c%5c%5c%22https%3a/blog.rust-lang.org/2024/11/28/rust-1.83.0/%5c%5c%5c%22%5cu003e%5cu003cimg

yonasbsd/pest/.github/actions/%5c%5c%5c%22https%3a/blog.rust-lang.org/2024/11/28/rust-1.83.0/%5c%5c%5c%22%5cu003e%5cu003cimg

The Elegant Parser

6/10
step-security/release-downloader

step-security/release-downloader

Github action to download release assets from private or public repositories. Secure drop-in replacement for robinraju/release-downloader.

8/10
Maintained by StepSecurity
launchdarkly/gha-ld-gosec

launchdarkly/gha-ld-gosec

Runs gosec then uploads results to s3 and workflow artifacts.

4/10
step-security/action-openfga-test

step-security/action-openfga-test

Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.

10/10
Maintained by StepSecurity
meilcli/gradle-update-check-action

meilcli/gradle-update-check-action

gradle maven new package version check action for GitHub Actions.

4/10
richardmcsong/actions/pr-sync

richardmcsong/actions/pr-sync

Custom actions for automating Backstage workflows

2/10
githubnext/gh-aw/actions/setup

githubnext/gh-aw/actions/setup

GitHub Agentic Workflows

6/10
quotidian-ennui/actions-olio/commit-status-and-label

quotidian-ennui/actions-olio/commit-status-and-label

It's a gallimaufry of actions

4/10
Maintained action available
ministryofjustice/hmpps-probation-integration-services/.github/actions/database-access-new

ministryofjustice/hmpps-probation-integration-services/.github/actions/database-access-new

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10
nvidia/nvsentinel/.github/actions/install-e2e-tools

nvidia/nvsentinel/.github/actions/install-e2e-tools

NVSentinel is a cross-platform fault remediation service designed to rapidly remediate runtime node-level issues in GPU-accelerated computing environments

8/10
aerospike/aerospike-client-c/.github/actions/generate-release-notes

aerospike/aerospike-client-c/.github/actions/generate-release-notes

Aerospike C Client

6/10
tue-robotics/tue-env/ci/fill

tue-robotics/tue-env/ci/fill

Package manager that can be used to install (ROS) dependencies

6/10
docker/bake-action/ui13c5/list-targets

docker/bake-action/ui13c5/list-targets

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
step-security/docker-build-push-action/_next/static/chunks/85591-a2d94b5591140a6d.js

step-security/docker-build-push-action/_next/static/chunks/85591-a2d94b5591140a6d.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10