StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

deriv-com/shared-actions/.github/actions/public-layout.tsx

deriv-com/shared-actions/.github/actions/public-layout.tsx

This repository is dedicated to hosting reusable GitHub Actions YAML files that can be shared across different repositories.

4/10
Maintained action available
step-security/action-gh-release/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-gh-release/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub Action for creating GitHub Releases. Secure drop-in replacement for softprops/action-gh-release.

10/10
bryan-roe/aria/.github/actions/validate-composite-actions

bryan-roe/aria/.github/actions/validate-composite-actions

Aria: An Automatic AI system designed to innovate and simplify tasks with intelligence. Explore cutting-edge artificial intelligence in Python.

6/10
stainless-api/trigger-release-please

stainless-api/trigger-release-please

GitHub action that runs Release Please externally

3/10
enricomi/publish-unit-test-result-action/v2.18.0

enricomi/publish-unit-test-result-action/v2.18.0

GitHub Action to publish unit test results on GitHub

4/10
Maintained action available
ledgerhq/ledger-live/tools/actions/composites/setup-android-env

ledgerhq/ledger-live/tools/actions/composites/setup-android-env

Mono-repository for Ledger Wallet apps and related packages

4/10
Maintained action available
grafana/synthetic-monitoring-api-go-client/_shared-workflows-publish-techdocs/actions/aws-auth

grafana/synthetic-monitoring-api-go-client/_shared-workflows-publish-techdocs/actions/aws-auth

Go client for Synthetic Monitoring

8/10
step-security/snyk-actions/gradle-jdk21

step-security/snyk-actions/gradle-jdk21

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
step-security/docker-login-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/docker-login-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to login against a Docker registry. Secure drop-in replacement for docker/login-action.

10/10
coveo/cli/.github/actions/image

coveo/cli/.github/actions/image

A command-line interface to interact with the Coveo platform and quickly create Coveo Headless-powered search pages with Angular, React or Vue.js.

6/10
aws-actions/codeguru-security

aws-actions/codeguru-security

5/10
pytorch/pytorch-integration-testing/test-infra/.github/actions/setup-ssh

pytorch/pytorch-integration-testing/test-infra/.github/actions/setup-ssh

Testing downstream libraries using pytorch release candidates

4/10
green-coding-solutions/eco-ci-energy-estimation

green-coding-solutions/eco-ci-energy-estimation

Eco CI Energy estimation for Github Actions, GitLab and Jenkins

4/10
yonasbsd/sccache/.github/actions/artifact_failure

yonasbsd/sccache/.github/actions/artifact_failure

Sccache is a ccache-like tool. It is used as a compiler wrapper and avoids compilation when possible. Sccache has the capability to utilize caching in remote storage environments, including various cloud storage options, or alternatively, in local storage.

3/10
Maintained action available
snyk/actions/gradle-jdk16

snyk/actions/gradle-jdk16

A set of GitHub actions for checking your projects for vulnerabilities.

4/10
vexxhost/github-actions/scan-image

vexxhost/github-actions/scan-image

Common GitHub actions workflows

2/10
yonasbsd/wazuh/.github/actions/image

yonasbsd/wazuh/.github/actions/image

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

4/10
Maintained action available
dustin4444/gemini-cli/.github/actions/run-tests

dustin4444/gemini-cli/.github/actions/run-tests

An open-source AI agent that brings the power of Gemini directly into your terminal.

5/10
Maintained action available
sonarsource/sonarlint-vscode/.github/actions/ovsx-publish

sonarsource/sonarlint-vscode/.github/actions/ovsx-publish

SonarQube extension for Visual Studio Code providing code quality and security feedback directly in the editor

6/10
sonarsource/sonar-scanner-msbuild/.actions/get-build-number

sonarsource/sonar-scanner-msbuild/.actions/get-build-number

SonarScanner for .NET

6/10