StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

timschoenle/actions/tmp/actions-code/actions/common/create-pull-request

timschoenle/actions/tmp/actions-code/actions/common/create-pull-request

Composite and Node GitHub Actions, reusable workflows and shared Renovate presets, each released under its own tag.

7/10
launchdarkly/openfeature-dotnet-server/.github/actions/public-layout.tsx

launchdarkly/openfeature-dotnet-server/.github/actions/public-layout.tsx

An OpenFeature provider for the LaunchDarkly dotnet server SDK.

5/10
Maintained action available
dsanders11/project-actions/add-item

dsanders11/project-actions/add-item

A collection of actions for automating GitHub projects

5/10
Maintained action available
microsoft/onnxruntime-github-actions/fill

microsoft/onnxruntime-github-actions/fill

Reusable GitHub Actions for ONNX Runtime repos. The actions are used for constructing ONNX Runtime's public pull request pipelines.

4/10
rubenesp87/semver-validation-action

rubenesp87/semver-validation-action

SEMVER validation Github Action

3/10
anmol098/waka-readme-stats

anmol098/waka-readme-stats

This GitHub action helps to add cool dev metrics to your github profile Readme

6/10
graycoreio/github-actions-magento2/get-magento-version

graycoreio/github-actions-magento2/get-magento-version

Github Actions and Workflows that make maintaining Magento2 stores and modules significantly easier.

4/10
Maintained action available
lfreleng-actions/maven-build-action

lfreleng-actions/maven-build-action

Action to build Maven projects

8/10
nam20485/docs-1/.github/actions/clone-translations

nam20485/docs-1/.github/actions/clone-translations

The open-source repo for docs.github.com

0/10
sgammon/verify-hashes

sgammon/verify-hashes

Library, CLI, and GitHub Action for verifying hashes

4/10
dustin4444/backtrace-javascript/.github/actions/smoke-tests

dustin4444/backtrace-javascript/.github/actions/smoke-tests

Backtrace error reporting for JavaScript languages

5/10
Maintained action available
step-security/allure-report-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/allure-report-action/__builder_checkout_dir__/.github/actions/privacy-check

Allure Report action with history. Secure drop-in replacement for simple-elf/allure-report-action.

10/10
asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-icon.svg

asymmetric-research/clusterfuzz-fuzzbot-builder/assets/brand/step-security-icon.svg

Build environment matching a FuzzBot running Ubuntu 22.04

2/10
udoprog/kick

udoprog/kick

The omnibus project management tool

1/10
Maintained action available
sonarsource/core-languages-tooling-public/ruling-update-and-notify

sonarsource/core-languages-tooling-public/ruling-update-and-notify

Development tooling for .NET โ€” For artifacts accessible from public repos

5/10
Maintained action available
githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289%20githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289

githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289%20githubsecuritylab/actions-permissions/monitor%40bf82d13b9b10051d224345ab9184f5ede0a94289

GitHub token permissions Monitor and Advisor actions

2/10
cloudposse/github-action-validate-codeowners

cloudposse/github-action-validate-codeowners

GitHub Action to Validate CODEOWNERS

4/10
allenai/beaker-run-action

allenai/beaker-run-action

A GitHub Action for running Beaker jobs

3/10
actions/cache/image

actions/cache/image

Cache dependencies and build outputs in GitHub Actions

5/10
Maintained action available
sonarsource/gh-action_release/image

sonarsource/gh-action_release/image

6/10