StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/docker-build-push-action/_next/static/chunks/48234-dabc8ccc8da10d4b.js

step-security/docker-build-push-action/_next/static/chunks/48234-dabc8ccc8da10d4b.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

8/10
orq-ai/headroom-internal/.github/actions/fill

orq-ai/headroom-internal/.github/actions/fill

The Context Optimization Layer for LLM Applications

4/10
step-security/create-a-file-action

step-security/create-a-file-action

A github action to create a file in your github workflow. Secure drop-in replacement for 1arp/create-a-file-action.

8/10
grafana/grafana/_shared-workflows-dockerhub-login/actions/get-vault-secrets

grafana/grafana/_shared-workflows-dockerhub-login/actions/get-vault-secrets

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10
hpcodecraft/action-deploy-workspace-to-repo

hpcodecraft/action-deploy-workspace-to-repo

Github action to copy files generated during a workflow run to an external repository

2/10
the-wright-jamie/update-pr-info-action

the-wright-jamie/update-pr-info-action

A GitHub Action that updates a pull request with information extracted from the head and/or base branch name

2/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/poseidon-wait-for-status-checks

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/poseidon-wait-for-status-checks

Mirror from https://github.com/poseidon/wait-for-status-checks

1/10
Maintained action available
fastly/compute-actions/build

fastly/compute-actions/build

GitHub Actions for building on Fastly Compute.

7/10
pravipati-sandbox/codeql-action/analyze

pravipati-sandbox/codeql-action/analyze

Actions for running CodeQL analysis

2/10
dustin4444/react-native/.github/actions/setup-xcode

dustin4444/react-native/.github/actions/setup-xcode

A framework for building native applications using React

5/10
Maintained action available
step-security/auto-assign-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/auto-assign-action/__builder_checkout_dir__/.github/actions/privacy-check

An action which adds reviewers to the pull request when the pull request is opened. Secure drop-in replacement for kentaro-m/auto-assign-action.

8/10
oxidize-rb/actions/cross-gem

oxidize-rb/actions/cross-gem

4/10
ljharb/actions/vlt/install

ljharb/actions/vlt/install

GitHub actions I use for CI.

5/10
Maintained action available
anbiona/gale/__builder_checkout_dir__/.github/actions/privacy-check

anbiona/gale/__builder_checkout_dir__/.github/actions/privacy-check

Hardened personal server based on secureblue.

6/10
fletort/jinja2-template-action

fletort/jinja2-template-action

Use Jinja2 template engine on multipe files as a GitHub action

3/10
slsa-framework/github-actions-demo

slsa-framework/github-actions-demo

Proof-of-concept SLSA provenance generator for GitHub Actions

3/10
launchdarkly/ruby-server-sdk-otel/.github/actions/publish

launchdarkly/ruby-server-sdk-otel/.github/actions/publish

LaunchDarkly SDK OTEL integration for the Ruby server side SDK

5/10
dolthub/upload-release-asset

dolthub/upload-release-asset

An Action to upload a release asset via the GitHub Release API

2/10
openvisualcloud/media-transport-library/.github/actions/image

openvisualcloud/media-transport-library/.github/actions/image

A real-time media transport (DPDK, AF_XDP) stack for both raw and compressed video based on COTS hardware.

5/10
Maintained action available
ai-dynamo/modelexpress/.github/actions/public-layout.tsx

ai-dynamo/modelexpress/.github/actions/public-layout.tsx

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10