StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-42825-8/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-42825-8/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
beer-sakthai/codeql-action/../action/.github/actions/check-codescanning-config

beer-sakthai/codeql-action/../action/.github/actions/check-codescanning-config

Actions for running CodeQL analysis

3/10
checkmarx/kics-action

checkmarx/kics-action

GitHub actions of KICS scan - Keeping Infrastructure as Code Secure

4/10
neonidian/teams-notify-build-status

neonidian/teams-notify-build-status

GitHub action: Send message to channel(s) in Microsoft Teams

2/10
step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/fetch-gh-release-asset/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.

9/10
testifysec/witness-run-action

testifysec/witness-run-action

2/10
kolide/expo-fork/.github/actions/use-android-emulator

kolide/expo-fork/.github/actions/use-android-emulator

Our fork of expo

3/10
step-security/install-datadog-ci-github-action

step-security/install-datadog-ci-github-action

Secure drop-in replacement for DataDog/install-datadog-ci-github-action.

10/10
Maintained by StepSecurity
iwamot/actions/go-publish

iwamot/actions/go-publish

iwamot's shared GitHub Actions composite actions.

6/10
chainguard-actions/docker-metadata-action

chainguard-actions/docker-metadata-action

2/10
Maintained action available
hkwi/kroxylicious/.github/actions/common/cache-maven-packages

hkwi/kroxylicious/.github/actions/common/cache-maven-packages

Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ

2/10
hashicorp/tfc-workflows-github/actions/apply-run

hashicorp/tfc-workflows-github/actions/apply-run

HCP Terraform starter workflows and github actions to automate Terraform Cloud CI/CD pipelines.

7/10
yonasbsd/pest/.github/actions/%5c%5c%5c%22https%3a/blog.rust-lang.org/2024/11/28/rust-1.83.0/%5c%5c%5c%22%5cu003e%5cu003cimg

yonasbsd/pest/.github/actions/%5c%5c%5c%22https%3a/blog.rust-lang.org/2024/11/28/rust-1.83.0/%5c%5c%5c%22%5cu003e%5cu003cimg

The Elegant Parser

5/10
step-security/release-downloader

step-security/release-downloader

Github action to download release assets from private or public repositories. Secure drop-in replacement for robinraju/release-downloader.

10/10
Maintained by StepSecurity
tempoxyz/gh-actions/vendor/gradle/actions/setup-gradle

tempoxyz/gh-actions/vendor/gradle/actions/setup-gradle

Reusable GitHub Actions for Tempo

4/10
Maintained action available
launchdarkly/gha-ld-gosec

launchdarkly/gha-ld-gosec

Runs gosec then uploads results to s3 and workflow artifacts.

4/10
step-security/action-openfga-test

step-security/action-openfga-test

Github Action for testing your OpenFGA Authorization Model. Secure drop-in replacement for openfga/action-openfga-test.

10/10
Maintained by StepSecurity
nvidia/k8s-test-infra/control/.github/actions/repo-automation

nvidia/k8s-test-infra/control/.github/actions/repo-automation

Simulate NVIDIA infrastructure (e.g. GPU) on CPU nodes in Kubernetes :coffee:๏ธ

7/10
meilcli/gradle-update-check-action

meilcli/gradle-update-check-action

gradle maven new package version check action for GitHub Actions.

0/10
richardmcsong/actions/pr-sync

richardmcsong/actions/pr-sync

Custom actions for automating Backstage workflows

2/10