StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

reviewdog/action-setup

reviewdog/action-setup

:dog: Setup reviewdog action

7/10
step-security/setup-nasm

step-security/setup-nasm

GitHub Action to install NASM. Secure drop-in replacement for ilammy/setup-nasm.

10/10
Maintained by StepSecurity
tofuutils/pre-commit-opentofu

tofuutils/pre-commit-opentofu

pre-commit git hooks to take care of OpenTofu configurations

4/10
Maintained action available
sozercan/dynamo/.github/actions/public-layout.tsx

sozercan/dynamo/.github/actions/public-layout.tsx

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
siddhant-k-code/agent-trace

siddhant-k-code/agent-trace

Observability for AI agents. See what your agent did, why it cost that much, and what to fix.

5/10
Maintained action available
step-security/setup-nasm/__builder_checkout_dir__/.github/actions/image

step-security/setup-nasm/__builder_checkout_dir__/.github/actions/image

GitHub Action to install NASM. Secure drop-in replacement for ilammy/setup-nasm.

10/10
fgravelle20-byte/stripe-cli/.github/actions/install-stripe-cli

fgravelle20-byte/stripe-cli/.github/actions/install-stripe-cli

A command-line tool for Stripe

2/10
statsig-io/statsig-publish-sdk-action/core

statsig-io/statsig-publish-sdk-action/core

1/10
launchdarkly/dotnet-logging-adapter-log4net/.github/actions/ci

launchdarkly/dotnet-logging-adapter-log4net/.github/actions/ci

Adapter from LaunchDarkly.Logging API to log4net

4/10
n8n-io/validate-n8n-pull-request-title

n8n-io/validate-n8n-pull-request-title

GitHub Action to validate that PR titles in n8n-io/n8n match n8n's version of the Conventional Commits spec

3/10
slsa-framework/slsa-github-generator/.github/actions/'

slsa-framework/slsa-github-generator/.github/actions/'

Language-agnostic SLSA provenance generation for Github Actions

4/10
chad-golden/setup-wpr/start

chad-golden/setup-wpr/start

A GitHub Action that simplifies recording Windows performance traces using Windows Performance Recorder

3/10
dbt-labs/dbt-release/.github/actions/next-cloud-release-version

dbt-labs/dbt-release/.github/actions/next-cloud-release-version

Manages releases of dbt Core

6/10
yonasbsd/binny/.github/actions/image

yonasbsd/binny/.github/actions/image

Manage a directory of binaries without a package manager

3/10
Maintained action available
step-security/docker-build-push-action/_next/static/chunks/17511-a24fc986dbe3b771.js

step-security/docker-build-push-action/_next/static/chunks/17511-a24fc986dbe3b771.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10
grafana/shared-workflows/actions/docker-build-push-image

grafana/shared-workflows/actions/docker-build-push-image

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10
mdjahid11978-design/pownershell-docs/.github/actions/reporting/versioned-content/v1

mdjahid11978-design/pownershell-docs/.github/actions/reporting/versioned-content/v1

The official PowerShell documentation sources

5/10
Maintained action available
nvidia/nemoclaw/.github/actions/fill

nvidia/nemoclaw/.github/actions/fill

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
bytecodealliance/actions/wasm-tools/fill

bytecodealliance/actions/wasm-tools/fill

GitHub actions to setup wasm-tools and wasmtime

2/10
softvence-omega-dev-ninjas/yousef1234321-backend/.github/actions/public-layout.tsx

softvence-omega-dev-ninjas/yousef1234321-backend/.github/actions/public-layout.tsx

2/10