StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

zingdevlimited/actions-helpers/build-now/fill

zingdevlimited/actions-helpers/build-now/fill

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks.

4/10
Maintained action available
step-security/korandoru-setup-zig

step-security/korandoru-setup-zig

Set up your GitHub Actions workflow with a specific version of Zig (https://ziglang.org/). Secure drop-in replacement for korandoru/setup-zig.

7/10
approved-3rd-party-actions/maven-settings-xml-action

approved-3rd-party-actions/maven-settings-xml-action

Github Action to create maven settings (~/.m2/settings.xml)

2/10
aerospike/aerospike-expression-lang-java/.github/actions/image

aerospike/aerospike-expression-lang-java/.github/actions/image

Aerospike Expression DSL Java

6/10
docker/bake-action/subaction/list-targets/u3dq42%20%3cxs1%2f%26

docker/bake-action/subaction/list-targets/u3dq42%20%3cxs1%2f%26

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
earthly/actions-setup

earthly/actions-setup

3/10
sonarsource/sonar-dummy-gradle-oss/.actions/fill

sonarsource/sonar-dummy-gradle-oss/.actions/fill

7/10
ministryofjustice/devsecops-actions/public-layout.tsx

ministryofjustice/devsecops-actions/public-layout.tsx

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

5/10
elastic/oblt-actions/oblt-cli/cluster-create-custom

elastic/oblt-actions/oblt-cli/cluster-create-custom

5/10
Maintained action available
tryghost/actions/actions/label-actions

tryghost/actions/actions/label-actions

Reusable GitHub Actions and workflow templates for Ghost repositories

7/10
phpdocker-io/github-actions-delete-abandoned-branches

phpdocker-io/github-actions-delete-abandoned-branches

Github action to delete abandoned branches.

3/10
pytorch/test-infra/test-infra/.github/actions/setup-linux

pytorch/test-infra/test-infra/.github/actions/setup-linux

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10
Maintained action available
sonarsource/gh-action_cache

sonarsource/gh-action_cache

GitHub action for caching in AWS S3

5/10
step-security/snyk-actions/sidebar.tsx

step-security/snyk-actions/sidebar.tsx

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
docker/bake-action/subaction/list-targets/fill

docker/bake-action/subaction/list-targets/fill

GitHub Action to use Docker Buildx Bake as a high-level build command

5/10
Maintained action available
step-security/actions-go-build/sidebar.tsx

step-security/actions-go-build/sidebar.tsx

Define a reproducible Go build. Secure drop-in replacement for hashicorp/actions-go-build.

9/10
imjasonh/another-checkov-action

imjasonh/another-checkov-action

2/10
step-security/setup-bazel

step-security/setup-bazel

GitHub Action to configure Bazel. Secure drop-in replacement for bazel-contrib/setup-bazel.

10/10
Maintained by StepSecurity
clowdhaus/terraform-min-max

clowdhaus/terraform-min-max

GitHub action used to evaluate the Terraform minimum and maximum versions permitted

5/10
reviewdog/action-staticcheck

reviewdog/action-staticcheck

๐Ÿถ Run staticcheck with reviewdog on pull requests to improve code review experience.

5/10
Maintained action available