StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

nightfallai/nightfall_dlp_action

nightfallai/nightfall_dlp_action

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

5/10
hibare/.github/github/shared-workflows/docker-image-build-publish

hibare/.github/github/shared-workflows/docker-image-build-publish

3/10
Maintained action available
ledgerhq/ledger-live/tools/actions/public-layout.tsx

ledgerhq/ledger-live/tools/actions/public-layout.tsx

Mono-repository for Ledger Wallet apps and related packages

4/10
Maintained action available
nvidia/sphinx-llm/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

nvidia/sphinx-llm/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

LLM extensions for Sphinx Documentation

5/10
Maintained action available
sonarsource/sonar-java-symbolic-execution/gh-action_release/public-layout.tsx

sonarsource/sonar-java-symbolic-execution/gh-action_release/public-layout.tsx

Sonar Java symbolic execution plugin

6/10
fr12k/terraform-monorepo-action

fr12k/terraform-monorepo-action

A GitHub action to return an array of paths to Terraform modules.

3/10
Maintained action available
step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/conventional-pr-title-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.

9/10
h0x0er/jaeger/.github/actions/setup-branch

h0x0er/jaeger/.github/actions/setup-branch

CNCF Jaeger, a Distributed Tracing Platform

3/10
caffeelake/voicevox_core/.github/actions/create-venv

caffeelake/voicevox_core/.github/actions/create-venv

無料で使える中品質なテキスト読み上げソフトウェア、VOICEVOXのコア

2/10
actions4git/add-commit-push

actions4git/add-commit-push

✨ Automagically git add, git commit, and git push

3/10
ljharb/actions/node/install

ljharb/actions/node/install

GitHub actions I use for CI.

6/10
step-security/snyk-actions/maven-3-jdk-17

step-security/snyk-actions/maven-3-jdk-17

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
snyk/actions/maven

snyk/actions/maven

A set of GitHub actions for checking your projects for vulnerabilities.

5/10
googleapis/librarian

googleapis/librarian

CLI for managing SDK client library configuration, generation and releases

5/10
Maintained action available
nvidia/spark-rapids-common/add-to-project

nvidia/spark-rapids-common/add-to-project

Reusable GitHub Actions workflows and common scripts for Spark RAPIDS

4/10
asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/step-security-icon.svg

asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/step-security-icon.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10
datreeio/action-datree

datreeio/action-datree

Github action that runs the Datree CLI

5/10
caffeelake/neqo/.github/actions/rust

caffeelake/neqo/.github/actions/rust

6/10
step-security/protobuf-ci/../../_actions/current/internal/bazel-setup

step-security/protobuf-ci/../../_actions/current/internal/bazel-setup

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

10/10
09168806659/metaplex-program-library/.github/actions/install-linux-build-deps

09168806659/metaplex-program-library/.github/actions/install-linux-build-deps

Smart contracts maintained by the Metaplex team

2/10