StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

benjule/bambustudio/.github/actions/get-version

benjule/bambustudio/.github/actions/get-version

BambuStudio fork with Linux packaging (AppImage, .deb, .rpm, Flatpak), CI/CD improvements and security hardening

4/10
tanker187/terraform/.github/actions/equivalence-test

tanker187/terraform/.github/actions/equivalence-test

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

2/10
step-security/setup-buildx-action/_next/static/chunks/app/(dashboard)/not-found-78ffcd161e5e6323.js

step-security/setup-buildx-action/_next/static/chunks/app/(dashboard)/not-found-78ffcd161e5e6323.js

GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.

10/10
ministryofjustice/laa-manage-your-civil-cases/.github/actions/reusable-playwright-steps

ministryofjustice/laa-manage-your-civil-cases/.github/actions/reusable-playwright-steps

A service to centrally manage civil legal aid cases for the Legal Aid Agency

6/10
multimediallc/codeowners-plus

multimediallc/codeowners-plus

Feature-rich alternative to GitHub Code Owners for monoliths and mono-repos

7/10
step-security/snyk-actions/dotnet

step-security/snyk-actions/dotnet

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-62616-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-62616-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
jscrambler/code-integrity-actions/protect

jscrambler/code-integrity-actions/protect

Code Integrity Github Actions

3/10
step-security/s3-actions-cache/image

step-security/s3-actions-cache/image

Cache to S3 storage with official actions/cache@v2 fallback. Secure drop-in replacement for tespkg/actions-cache.

8/10
sonarsource/helm-chart-sonarqube/.github/actions/helm-index

sonarsource/helm-chart-sonarqube/.github/actions/helm-index

7/10
step-integration-tests/auto-pdpr-test-20483-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-20483-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/actions-codespell/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/actions-codespell/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Actions to run codespell over your code. Secure drop-in replacement for codespell-project/actions-codespell.

10/10
step-security/ansible-galaxy-action/image

step-security/ansible-galaxy-action/image

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
sasobadovinac/mfem/.github/actions/sanitize/config

sasobadovinac/mfem/.github/actions/sanitize/config

Lightweight, general, scalable C++ library for finite element methods

3/10
nackerman-nydig/hadolint-action

nackerman-nydig/hadolint-action

GitHub action for Hadolint, A Dockerfile linting tool

3/10
step-integration-tests/auto-pdpr-test-99381-5/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-99381-5/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289

githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289

GitHub token permissions Monitor and Advisor actions

2/10
launchdarkly/find-code-references-in-pull-request/.github/actions/fill

launchdarkly/find-code-references-in-pull-request/.github/actions/fill

Find Code Reference Flags in Pull Requests

7/10
sigmahq/sigma-rules-validator

sigmahq/sigma-rules-validator

Validates Sigma rules using the JSON schema

5/10
Maintained action available
coveooss/snapshots-github-actions/.github/actions/deploy

coveooss/snapshots-github-actions/.github/actions/deploy

An example of how-to manage your Coveo Organization with Code, GHA, and the Coveo CLI

3/10