StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/envsubst-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/envsubst-action/__builder_checkout_dir__/.github/actions/privacy-check

Github Action for envsubst. Secure drop-in replacement for danielr1996/envsubst-action.

10/10
coinbase/cb-mpc/vendors/github-action-benchmark

coinbase/cb-mpc/vendors/github-action-benchmark

Coinbase MPC Library

5/10
Maintained action available
camunda/infra-global-github-actions/fossa/public-layout.tsx

camunda/infra-global-github-actions/fossa/public-layout.tsx

Small Github Actions maintained by Infra team and used by other teams inside Camunda

6/10
suzuki-shunsuke/commit-action/js

suzuki-shunsuke/commit-action/js

GitHub Action to push changes to remote branches by GitHub API. You can create verified commits using GitHub App.

6/10
step-security/conditional-build-matrix/__builder_checkout_dir__/.github/actions/privacy-check

step-security/conditional-build-matrix/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action that enables easier conditional matrix builds!. Secure drop-in replacement for JoshuaTheMiller/conditional-build-matrix.

10/10
sasobadovinac/tldraw/.github/actions/setup

sasobadovinac/tldraw/.github/actions/setup

whiteboard / infinite canvas SDK

4/10
Maintained action available
zg9vfpp47z-dotcom/agent-governance-toolkit/.github/actions/contributor-check

zg9vfpp47z-dotcom/agent-governance-toolkit/.github/actions/contributor-check

AI Agent Governance Toolkit โ€” Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

3/10
cyber-dojo/download-artifact

cyber-dojo/download-artifact

Composite workflow to download a docker image created by reusable-actions-workflows' secure-docker-build workflow.

3/10
step-security/super-linter/public-layout.tsx

step-security/super-linter/public-layout.tsx

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10
deepcode-ai/codeql/codeql/.github/actions/fetch-codeql

deepcode-ai/codeql/codeql/.github/actions/fetch-codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

2/10
technote-space/assign-author

technote-space/assign-author

GitHub Actions to assign author to issue or PR

3/10
dustin4444/react-native/.github/actions/prepare-ios-tests

dustin4444/react-native/.github/actions/prepare-ios-tests

A framework for building native applications using React

5/10
Maintained action available
rapidsai/shared-actions/shared-actions/telemetry-impls/stash-job-artifacts

rapidsai/shared-actions/shared-actions/telemetry-impls/stash-job-artifacts

6/10
grafana/grafana/.github/actions/yarn-install

grafana/grafana/.github/actions/yarn-install

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10
hashicorp/tfc-workflows-github/actions/create-run

hashicorp/tfc-workflows-github/actions/create-run

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

7/10
step-integration-tests/auto-pdpr-test-61883-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-61883-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
ministryofjustice/devsecops-actions/sca/moj

ministryofjustice/devsecops-actions/sca/moj

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

6/10
tchupp/actions-detect-directory-changes

tchupp/actions-detect-directory-changes

2/10
deriv-com/shared-actions/.github/actions/post_preview_link_comment

deriv-com/shared-actions/.github/actions/post_preview_link_comment

This repository is dedicated to hosting reusable GitHub Actions YAML files that can be shared across different repositories.

4/10
Maintained action available
amplify-security/runner-action

amplify-security/runner-action

Github Action to run Amplify Security's scanner orchestrator.

4/10