StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

szhekpisov/gomutants

szhekpisov/gomutants

Mutation testing for Go, fast enough to run on every edit.

7/10
gregclermont/tinybpf/.github/actions/build-ebpf

gregclermont/tinybpf/.github/actions/build-ebpf

Minimal Python library for loading CO-RE eBPF programs

4/10
project-copacetic/copa-action

project-copacetic/copa-action

:octocat: GitHub Action for Copacetic: Directly patch container image vulnerabilities

4/10
step-security/workflow-dispatch/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/workflow-dispatch/__builder_checkout_dir__/.github/actions/secure-download-artifact

A GitHub Action for triggering workflows, using the `workflow_dispatch` event. Secure drop-in replacement for benc-uk/workflow-dispatch.

10/10
redpanda-data/arrow-rs/.github/actions/public-layout.tsx

redpanda-data/arrow-rs/.github/actions/public-layout.tsx

Official Rust implementation of Apache Arrow

3/10
phillipdupuis/pydantic-to-typescript

phillipdupuis/pydantic-to-typescript

CLI Tool for converting pydantic models into typescript definitions

4/10
step-security/gha-setup-yq

step-security/gha-setup-yq

gha-setup-yq is a GitHub action to install the yq command line YAML parser. Secure drop-in replacement for vegardit/gha-setup-yq.

10/10
Maintained by StepSecurity
wasmedge/wasmedgeup/.github/actions/setup-rust

wasmedge/wasmedgeup/.github/actions/setup-rust

5/10
Maintained action available
yonasbsd/dragonfly/.github/actions/lint-test-chart

yonasbsd/dragonfly/.github/actions/lint-test-chart

A modern replacement for Redis and Memcached

2/10
Maintained action available
step-security/ghaction-github-status/__builder_checkout_dir__/.github/actions/image

step-security/ghaction-github-status/__builder_checkout_dir__/.github/actions/image

GitHub Action to check GitHub Status in your workflow. Secure drop-in replacement for crazy-max/ghaction-github-status.

9/10
alexanderbarabanov/geti-ci/actions/skill-validator

alexanderbarabanov/geti-ci/actions/skill-validator

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

5/10
navikt/familie-baks-gha-workflows/.github/actions/build-docker-image

navikt/familie-baks-gha-workflows/.github/actions/build-docker-image

Felles GitHub Actions workflows for Team BAKS sine applikasjoner

7/10
flox/activate-action

flox/activate-action

Run command in a Flox environment

4/10
ahmadnassri/action-google-cloud-sql-proxy

ahmadnassri/action-google-cloud-sql-proxy

3/10
dustin4444/gemini-cli/.github/actions/calculate-vars

dustin4444/gemini-cli/.github/actions/calculate-vars

An open-source AI agent that brings the power of Gemini directly into your terminal.

7/10
oke-py/npm-audit-action

oke-py/npm-audit-action

GitHub Action to run `npm audit`

4/10
Maintained action available
cilium/scale-tests-action/cleanup-cluster

cilium/scale-tests-action/cleanup-cluster

Repository that hosts the GitHub action to run scale tests

4/10
Maintained action available
sonarsource/sonar-python/.github-commons/actions/analyze

sonarsource/sonar-python/.github-commons/actions/analyze

:snake: SonarQube Python plugin

5/10
Maintained action available
home-assistant/actions/helpers/verify-version

home-assistant/actions/helpers/verify-version

GitHub Actions for Home Assistant workflows

6/10
shopware/shopware-mcp-evals/.github/actions/bootstrap

shopware/shopware-mcp-evals/.github/actions/bootstrap

Two-layer test suite for the Shopware MCP server: functional checks and LLM-based tool description evals.

5/10
Maintained action available