StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

scalr/scalr-action

scalr/scalr-action

Scalr Github Action

3/10
simonmarty/aws-secretsmanager-get-secrets/.github/actions/build

simonmarty/aws-secretsmanager-get-secrets/.github/actions/build

3/10
rust-build/rust-build.action

rust-build/rust-build.action

Automate publishing Rust build artifacts for GitHub releases through GitHub Actions

3/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/viarise/benchmark-dockerfile

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/viarise/benchmark-dockerfile

3/10
istio/get-istioctl

istio/get-istioctl

3/10
ashishkurmi/changed-files

ashishkurmi/changed-files

3/10
cardinalby/git-tag-action

cardinalby/git-tag-action

GitHub action that adds a git tag to the current workflow commit

3/10
asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/step-security-brand-name.svg

asymmetric-research/clusterfuzz-fuzzbot-builder/_next/image/assets/brand/step-security-brand-name.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10
devantler-tech/actions/upload-coverage

devantler-tech/actions/upload-coverage

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
ankane/setup-mysql

ankane/setup-mysql

The missing action for MySQL

4/10
Maintained action available
openai/codex-action

openai/codex-action

6/10
qsadyysy786-tech/gemini-cli/.github/actions/verify-release

qsadyysy786-tech/gemini-cli/.github/actions/verify-release

An open-source AI agent that brings the power of Gemini directly into your terminal.

3/10
firedancer-io/firedancer/.github/actions/submodule

firedancer-io/firedancer/.github/actions/submodule

Firedancer is Jump Crypto's Solana validator software.

5/10
Maintained action available
negz/create-tag

negz/create-tag

Create a git tag!

3/10
mridang/action-runner-common

mridang/action-runner-common

Composite GitHub Action wrapping step-security/harden-runner and ScribeMD/docker-cache, pinned by SHA, applied as the first step of every workflow.

2/10
tobked/label-when-approved-action

tobked/label-when-approved-action

2/10
octokit/request-action

octokit/request-action

A GitHub Action to send arbitrary requests to GitHub's REST API

7/10
pytorch/test-infra/.github/actions/clang-tidy-upload

pytorch/test-infra/.github/actions/clang-tidy-upload

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10
Maintained action available
aquaproj/registry-action/generate-registry

aquaproj/registry-action/generate-registry

GitHub Actions for aqua Registry

6/10
ai-dynamo/dynamo/.github/actions/fill

ai-dynamo/dynamo/.github/actions/fill

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available