StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

grafana/grafana-cloudwatch-datasource/actions/commands

grafana/grafana-cloudwatch-datasource/actions/commands

Grafana CloudWatch Datasource plugin

8/10
step-integration-tests/auto-pdpr-test-56791-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-56791-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
isaac-sim/isaaclab/.github/actions/public-layout.tsx

isaac-sim/isaaclab/.github/actions/public-layout.tsx

Unified framework for robot learning built on NVIDIA Isaac Sim

6/10
step-security/create-or-update-pull-request-action

step-security/create-or-update-pull-request-action

A GitHub Action to create or update a pull request based on local changes. Secure drop-in replacement for gr2m/create-or-update-pull-request-action.

10/10
Maintained by StepSecurity
step-security/openapitools-generator-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/openapitools-generator-action/__builder_checkout_dir__/.github/actions/privacy-check

Generate a client library using the OpenAPITools Generator. Secure drop-in replacement for openapi-generators/openapitools-generator-action.

10/10
noir-lang/noir-gates-diff

noir-lang/noir-gates-diff

1/10
jonathancombs782/aspire/.github/actions/check-changed-files

jonathancombs782/aspire/.github/actions/check-changed-files

Aspire is the tool for code-first, extensible, observable dev and deploy.

3/10
sredevopsorg/ghost-on-kubernetes/.github/actions/set-ghost-version

sredevopsorg/ghost-on-kubernetes/.github/actions/set-ghost-version

Deploy the leading open-source publishing platform, Ghost, on Kubernetes and Docker with maximum security and efficiency using a hardened, multi-arch container image.

8/10
anysphere/bugbot-context

anysphere/bugbot-context

2/10
jessehouwing/azdo-marketplace/publish

jessehouwing/azdo-marketplace/publish

Azure Pipelines and GitHub Actions for the Azure DevOps Marketplace

5/10
Maintained action available
bokuweb/image

bokuweb/image

Encoding and decoding images in Rust

3/10
nvidia/cuda-quantum/.github/actions/wheel-cache-register

nvidia/cuda-quantum/.github/actions/wheel-cache-register

C++ and Python support for the CUDA Quantum programming model for heterogeneous quantum-classical workflows

5/10
Maintained action available
cloudposse/github-action-yaml-config-query

cloudposse/github-action-yaml-config-query

Define YAML document, filter it with JSON query and get result as outputs

4/10
yonasbsd/buck2/.github/actions/build_debug

yonasbsd/buck2/.github/actions/build_debug

Build system, successor to Buck

3/10
Maintained action available
gliech/create-github-secret-action

gliech/create-github-secret-action

Github Action that can create or update secrets in the GitHub Actions API

2/10
sonarsource/core-languages-tooling-public/pvf-trigger

sonarsource/core-languages-tooling-public/pvf-trigger

Development tooling for .NET โ€” For artifacts accessible from public repos

5/10
Maintained action available
vendic/magento2-oh-dear-elasticsuite/.github/actions/fill

vendic/magento2-oh-dear-elasticsuite/.github/actions/fill

Add Elasticsuite checks to Vendic/magento2-oh-dear

2/10
step-integration-tests/auto-pdpr-test-48086-11/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-48086-11/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/ghost/.github/actions/load-docker-image

yonasbsd/ghost/.github/actions/load-docker-image

Independent technology for modern publishing, memberships, subscriptions and newsletters.

5/10
Maintained action available
devsectop/tf-via-pr

devsectop/tf-via-pr

Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.

6/10