StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

reality2byte/setup-deno

reality2byte/setup-deno

Set up your GitHub Actions workflow with a specific version of Deno

5/10
kong/slsa-github-generator/.github/actions/secure-download-artifact

kong/slsa-github-generator/.github/actions/secure-download-artifact

Language-agnostic SLSA provenance generation for Github Actions

3/10
microsoft/powerplatform-actions/image

microsoft/powerplatform-actions/image

Power Platform GitHub Actions automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.

6/10
launchdarkly/js-core/actions/public-layout.tsx

launchdarkly/js-core/actions/public-layout.tsx

LaunchDarkly monorepo for JavaScript SDKs

6/10
chronograph-pe/automerge-action

chronograph-pe/automerge-action

GitHub action to automatically merge pull requests that are ready

2/10
checkmarx/kics

checkmarx/kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

7/10
anysphere/alls-green

anysphere/alls-green

A check for whether the dependency jobs are all green.

3/10
kong/github-actions-ensure-sha-pinned-actions

kong/github-actions-ensure-sha-pinned-actions

A Github Action to ensure that actions are pinned to full length commit SHAs

2/10
egibs/actions/matrix-extra-inputs

egibs/actions/matrix-extra-inputs

A collection of reusable Github Actions workflows.

5/10
siemens/ix/.github/workflows/actions/image

siemens/ix/.github/workflows/actions/image

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

6/10
nyrkio/change-detection

nyrkio/change-detection

GitHub Action for Continuous Benchmarking and NyrkiΓΆ Change Detection

2/10
clidey/whodb/.github/actions/image

clidey/whodb/.github/actions/image

Where data access meets operational intelligence

4/10
Maintained action available
caffeelake/xformers/.github/actions/setup-build-cuda

caffeelake/xformers/.github/actions/setup-build-cuda

Hackable and optimized Transformers building blocks, supporting a composable construction.

1/10
Maintained action available
coveo/ui-kit/.github/actions/public-layout.tsx

coveo/ui-kit/.github/actions/public-layout.tsx

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
launchdarkly/rust-sdk-transport/.github/actions/ci

launchdarkly/rust-sdk-transport/.github/actions/ci

Transport for use with LaunchDarkly Rust libraries

6/10
step-security/delete-untagged-ghcr-action

step-security/delete-untagged-ghcr-action

Action for delete containers from Github container registry. Secure drop-in replacement for Chizkiyahu/delete-untagged-ghcr-action.

10/10
Maintained by StepSecurity
stcarolas/setup-maven

stcarolas/setup-maven

Set up your GitHub Actions workflow with a specific version of Apache Maven

3/10
notaryproject/notation-action/public-layout.tsx

notaryproject/notation-action/public-layout.tsx

GitHub Actions for signing and verifying artifacts with Notation

5/10
ministryofjustice/cloud-platform-environments/cmd/push-terraform-module-version

ministryofjustice/cloud-platform-environments/cmd/push-terraform-module-version

Environment configuration for the Cloud Platform

6/10
danger/danger-js

danger/danger-js

⚠️ Stop saying "you forgot to …" in code review

4/10
Maintained action available