StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

nix-community/cache-nix-action/restore

nix-community/cache-nix-action/restore

Cache Nix Store in GitHub Actions to speed up workflows [maintainer=@deemp]

5/10
Maintained action available
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/cloud-platform-deploy

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/cloud-platform-deploy

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

5/10
swift-institute/.github/.github/actions/ci-subject

swift-institute/.github/.github/actions/ci-subject

Organization-level community-health defaults for Swift Institute.

5/10
Maintained action available
quipper/setup-aws-cli-action

quipper/setup-aws-cli-action

Set up AWS CLI v2 for self-hosted runners in GitHub Actions

4/10
pytorch/ao/test-infra/.github/actions/fill

pytorch/ao/test-infra/.github/actions/fill

PyTorch native quantization for training and inference

4/10
Maintained action available
sonarsource/echoes-react/.actions/get-build-number

sonarsource/echoes-react/.actions/get-build-number

A React implementation of Echoes, Sonar's design system.

4/10
Maintained action available
step-security/snyk-actions/gradle

step-security/snyk-actions/gradle

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
luxass/purge-action-cache

luxass/purge-action-cache

Purge GitHub Actions Cache

4/10
launchdarkly/roku-client-sdk/.github/actions/ci

launchdarkly/roku-client-sdk/.github/actions/ci

LaunchDarkly Client-side SDK for Roku (Brightscript)

5/10
Maintained action available
sonarsource/sonar-compliance-reports/gh-action_release/main

sonarsource/sonar-compliance-reports/gh-action_release/main

Holds code for generating compliance reports

4/10
instrumenta/kubeval-action

instrumenta/kubeval-action

A GitHub Action for using Kubeval

2/10
unevenlabs/relay-chain/.github/actions/setup-mock-da

unevenlabs/relay-chain/.github/actions/setup-mock-da

A starter template for building real-time rollups

0/10
bitwarden/gh-actions/get-release-version

bitwarden/gh-actions/get-release-version

Bitwarden-utilized GitHub Actions.

6/10
step-security/allure-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/allure-action/__builder_checkout_dir__/.github/actions/privacy-check

Secure drop-in replacement for allure-framework/allure-action.

10/10
checkmarxdev/cx-arch-llama-cpp/.github/actions/public-layout.tsx

checkmarxdev/cx-arch-llama-cpp/.github/actions/public-layout.tsx

LLM inference in C/C++

4/10
microsoft/msbuild

microsoft/msbuild

The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.

8/10
tlmsllc/copilot-sdk/.github/actions/setup-copilot

tlmsllc/copilot-sdk/.github/actions/setup-copilot

Multi-platform SDK for integrating GitHub Copilot Agent into apps and services

4/10
envoyproxy/toolshed/gh-actions/bson

envoyproxy/toolshed/gh-actions/bson

7/10
dangoslen/changelog-enforcer

dangoslen/changelog-enforcer

A simple GitHub action that enforces that a maintained changelog is kept up to date.

3/10
kentaro-m/task-completed-checker-action

kentaro-m/task-completed-checker-action

:ballot_box_with_check: A GitHub action that checks if all tasks are completed in the pull requests.

3/10