StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

dustin4444/testcontainers-java/.github/actions/setup-junit-report

dustin4444/testcontainers-java/.github/actions/setup-junit-report

Testcontainers is a Java library that supports JUnit tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

5/10
Maintained action available
step-security/chart-testing-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/chart-testing-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to lint and test Helm charts. Secure drop-in replacement for helm/chart-testing-action.

10/10
adishm98/auth-vpn/public-layout.tsx

adishm98/auth-vpn/public-layout.tsx

Self-hosted VPN tunnel for cloud VMs. One binary, one open port, every Docker container becomes privately reachable.

3/10
projectdiscovery/actions/setup/git

projectdiscovery/actions/setup/git

ProjectDiscovery's Composite Actions

7/10
jfagoagas/grafana/actions/update-changelog

jfagoagas/grafana/actions/update-changelog

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10
toblux/start-clamd-github-action

toblux/start-clamd-github-action

GitHub Action to start a ClamAV server

4/10
Maintained action available
hetznercloud/setup-hcloud

hetznercloud/setup-hcloud

GitHub action to install the Hetzner Cloud CLI.

6/10
coveord/spinnaker/.github/actions/update-monorepo

coveord/spinnaker/.github/actions/update-monorepo

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10
launchdarkly/go-ntlm-proxy-auth/.github/actions/coverage

launchdarkly/go-ntlm-proxy-auth/.github/actions/coverage

Authorize to an NTLM Proxy for a HTTP(S) connection in Golang (LaunchDarkly fork)

5/10
step-integration-tests/auto-pdpr-test-56435-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-56435-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
coveo/ui-kit/.github/actions/run-affected

coveo/ui-kit/.github/actions/run-affected

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
dustin4444/metaplex-program-library/.github/actions/install-solana

dustin4444/metaplex-program-library/.github/actions/install-solana

Smart contracts maintained by the Metaplex team

2/10
jjchange10/test-actions/.github/actions/suspicious-action

jjchange10/test-actions/.github/actions/suspicious-action

2/10
veeezo/viem/.github/actions/install-dependencies

veeezo/viem/.github/actions/install-dependencies

TypeScript Interface for Ethereum

2/10
devexpress/testcafe-action

devexpress/testcafe-action

TestCafe test runner for GitHub Actions

0/10
sonarsource/release-github-actions/slack-message

sonarsource/release-github-actions/slack-message

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

5/10
Maintained action available
navikt/frontend/actions/spa-deploy/v2

navikt/frontend/actions/spa-deploy/v2

Samling for gode frontend lรธsninger, golden-path for frontend-prosjekter

0/10
nyankiyoshi/pytest-django-queries-ci-tools

nyankiyoshi/pytest-django-queries-ci-tools

2/10
step-security/snyk-actions/gradle-8-jdk17

step-security/snyk-actions/gradle-8-jdk17

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
step-security/git-auto-commit-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/git-auto-commit-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Automatically commit and push changed files back to GitHub with this GitHub Action for the 80% use case. Secure drop-in replacement for stefanzweifel/git-auto-commit-action.

10/10