StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

kong/slsa-github-generator/.github/actions/sign-attestations

kong/slsa-github-generator/.github/actions/sign-attestations

Language-agnostic SLSA provenance generation for Github Actions

3/10
step-security/super-linter/internal/legacy

step-security/super-linter/internal/legacy

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10
envoyproxy/toolshed/actions/github/artifact/cache/restore

envoyproxy/toolshed/actions/github/artifact/cache/restore

7/10
yogeshlonkar/wait-for-jobs

yogeshlonkar/wait-for-jobs

Wait for the specified jobs in the same run to be complete successfully before proceeding, helpful to prestart the job

5/10
Maintained action available
tofutf/tofutf

tofutf/tofutf

An open source alternative to terraform enterprise.

5/10
step-security/mimosa/gh/build-push-action

step-security/mimosa/gh/build-push-action

Zero-config docker image promotion. Secure drop-in replacement for hytromo/mimosa.

5/10
Maintained action available
Maintained by StepSecurity
nuget/setup-nuget

nuget/setup-nuget

7/10
py-cov-action/python-coverage-comment-action

py-cov-action/python-coverage-comment-action

Publish coverage report as PR comment, and create a coverage badge & dashboard to display on the Readme for Python projects, all inside GitHub without third party servers

7/10
jonasalfredsson/docker-on-tmpfs

jonasalfredsson/docker-on-tmpfs

GitHub Action that mounts a tmpfs volume on /var/lib/docker/.

3/10
typoci/spellcheck-action

typoci/spellcheck-action

GitHub Action for checking code & Pull Requests for spelling mistakes

2/10
sonarsource/ci-github-actions/build-yarn

sonarsource/ci-github-actions/build-yarn

CI/CD GitHub Actions

6/10
step-security/action-push-tag/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/action-push-tag/__builder_checkout_dir__/.github/actions/secure-download-artifact

๐Ÿ”– GitHub Action to push a Git tag. Secure drop-in replacement for actions-ecosystem/action-push-tag.

10/10
chronograph-pe/action-setup

chronograph-pe/action-setup

:dog: Setup reviewdog action

3/10
warpbuilds/snapshot-save

warpbuilds/snapshot-save

Github action to save snapshot of the current machine to WarpBuild

3/10
devantler-tech/actions/setup-ksail-cli

devantler-tech/actions/setup-ksail-cli

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
step-security/test-results-reporter-publish

step-security/test-results-reporter-publish

Github Action for testbeats publish command. Secure drop-in replacement for test-results-reporter/publish.

10/10
Maintained by StepSecurity
openai/terraform-provider-openai/.github/actions/verify-release-dependencies

openai/terraform-provider-openai/.github/actions/verify-release-dependencies

The official Terraform provider for OpenAI.

5/10
ministryofjustice/opg-github-actions/actions/release

ministryofjustice/opg-github-actions/actions/release

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

7/10
rez0n/actions-github-release

rez0n/actions-github-release

Github Action that able to get the release version of the remote repository in your Actions workflow

3/10
alex-page/github-project-automation-plus

alex-page/github-project-automation-plus

๐Ÿค– Automate GitHub Project cards with any webhook event

3/10