StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

pytorch/rl/test-infra/.github/actions/pull-docker-image

pytorch/rl/test-infra/.github/actions/pull-docker-image

A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.

3/10
Maintained action available
grafana/shared-workflows/actions/setup-argo

grafana/shared-workflows/actions/setup-argo

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10
erclu/check-crlf

erclu/check-crlf

GitHub Action to check for files with CRLF line endings

4/10
caffeelake/pytorch-lightning/.github/actions/pkg-check

caffeelake/pytorch-lightning/.github/actions/pkg-check

Pretrain, finetune and deploy AI models on multiple GPUs, TPUs with zero code changes.

4/10
Maintained action available
esp-rs/xtensa-toolchain

esp-rs/xtensa-toolchain

A GitHub Action to install the Rust compiler fork targeting Xtensa devices

4/10
conormacbride/install-package

conormacbride/install-package

GitHub Action to install packages from brew, brew cask, apt and choco.

4/10
sonarsource/sonar-dummy-js/.actions/public-layout.tsx

sonarsource/sonar-dummy-js/.actions/public-layout.tsx

7/10
zattoo/changelog

zattoo/changelog

๐Ÿ“‹ GitHub Action to validate CHANGELOG.md files and indicate if the changelog should be modified based on watch folders.

3/10
certora/certora-run-action

certora/certora-run-action

Certora Run GitHub Action

5/10
grafana/docker-slack-message/_shared-workflows-dockerhub-login/actions/get-vault-secrets

grafana/docker-slack-message/_shared-workflows-dockerhub-login/actions/get-vault-secrets

Very simple tool to send Slack messages. Built into a docker image

8/10
starship/crowdin-pretranslate-action

starship/crowdin-pretranslate-action

2/10
envoy/install-helm-docs

envoy/install-helm-docs

Github Action to install helm docs in CI flow

4/10
step-security/allure-report-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/allure-report-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Allure Report action with history. Secure drop-in replacement for simple-elf/allure-report-action.

10/10
dustin4444/attest-build-provenance

dustin4444/attest-build-provenance

Action for generating build provenance attestations for workflow artifacts

6/10
svanboxel/delete-merged-branch

svanboxel/delete-merged-branch

No more manually deleting merged branches, this lovely app does it for you.

5/10
step-security/setup-qemu-action/_next/static/chunks/polyfills-42372ed130431b0a.js

step-security/setup-qemu-action/_next/static/chunks/polyfills-42372ed130431b0a.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

10/10
servo/ci-runners/actions/runner-select

servo/ci-runners/actions/runner-select

GitHub Actions runners

4/10
Maintained action available
sonarsource/gh-action_cache/symlink-keeper

sonarsource/gh-action_cache/symlink-keeper

GitHub action for caching in AWS S3

6/10
step-integration-tests/auto-pdpr-test-74716-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-74716-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
grafana/grafana-bench/.github/actions/setup-grafana-bench

grafana/grafana-bench/.github/actions/setup-grafana-bench

Grafana Bench

6/10