StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/zingdevlimited-actions-helpers/azure/image

step-security/zingdevlimited-actions-helpers/azure/image

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks. Secure drop-in replacement for zingdevlimited/actions-helpers.

10/10
ministryofjustice/hmpps-probation-integration-services/.github/actions/app-insights-to-s3

ministryofjustice/hmpps-probation-integration-services/.github/actions/app-insights-to-s3

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

8/10
bubkoo/auto-assign

bubkoo/auto-assign

๐ŸŽฏ Automatically add reviewers/assignees to issues/PRs

2/10
pytorch/kineto/test-infra/.github/actions/checkout

pytorch/kineto/test-infra/.github/actions/checkout

A CPU+GPU Profiling library that provides access to timeline traces and hardware performance counters.

2/10
Maintained action available
boecht/birre/.github/actions/uv-env

boecht/birre/.github/actions/uv-env

BiRRe (Bitsight Rating Retriever) MCP server provides access to BitSight security rating data without installation

6/10
nelonoel/branch-name

nelonoel/branch-name

GitHub Action for exporting current branch name as an environment variable

3/10
immich-app/devtools/actions/public-layout.tsx

immich-app/devtools/actions/public-layout.tsx

Various tooling used by the Immich maintainer team

7/10
kong/developer.konghq.com/.github/reusable-steps/generate-instruction-files

kong/developer.konghq.com/.github/reusable-steps/generate-instruction-files

๐Ÿฆ Source code for developer.konghq.com website.

4/10
Maintained action available
newton-physics/urdf-usd-converter/.github/actions/bootstrap

newton-physics/urdf-usd-converter/.github/actions/bootstrap

A URDF to OpenUSD Data Converter

8/10
prisma/create-prisma-postgres-database-action

prisma/create-prisma-postgres-database-action

3/10
nvidia/nemoclaw/.github/actions/ci-installer-integration

nvidia/nemoclaw/.github/actions/ci-installer-integration

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
gradle/gradle-command-action

gradle/gradle-command-action

Execute your Gradle build and trigger dependency submission

0/10
step-security/create-opsgenie-alert-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/create-opsgenie-alert-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

GiHub action for creating new alert in OpsGenie. Secure drop-in replacement for rockem/create-opsgenie-alert-action.

8/10
actions-security-demo/script-injection/.github/actions/test-coverage-processor

actions-security-demo/script-injection/.github/actions/test-coverage-processor

2/10
bjw-s-labs/helm-charts-actions/public-layout.tsx

bjw-s-labs/helm-charts-actions/public-layout.tsx

A collection of GitHub actions to use with helm-charts repo. Mirror of https://git.bjw-s.dev/bjw-s/helm-charts-actions

4/10
Maintained action available
dustin4444/login-action

dustin4444/login-action

GitHub Action to login against a Docker registry

5/10
Maintained action available
grafana/community-contributions/pkg/build/actions/bump-version

grafana/community-contributions/pkg/build/actions/bump-version

External contributor PR workflow testing sandbox

2/10
step-integration-tests/auto-pdpr-test-34006-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-34006-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
coveord/spinnaker/.github/actions/version

coveord/spinnaker/.github/actions/version

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10
nv-legate/cupynumeric/legate-gh-ci/.github/actions/setup

nv-legate/cupynumeric/legate-gh-ci/.github/actions/setup

End of life; no longer maintained. Final public release: v26.06.01.

0/10