StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

softprops/action-gh-release/_next/static/chunks/31497-9433930b8b260696.js

softprops/action-gh-release/_next/static/chunks/31497-9433930b8b260696.js

๐Ÿ“ฆ :octocat: GitHub Action for creating GitHub Releases

5/10
Maintained action available
lukislp/ci-workflows/.github/actions/nuget-severity-gate

lukislp/ci-workflows/.github/actions/nuget-severity-gate

Shared GitHub Actions workflows and composite actions for the lukislp repositories

7/10
step-security/create-pull-request/_next/static/chunks/16514-cbdcba20aa59c18f.js

step-security/create-pull-request/_next/static/chunks/16514-cbdcba20aa59c18f.js

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10
step-security/azure-login

step-security/azure-login

Connect to Azure. Secure drop-in replacement for azure/login.

10/10
Maintained by StepSecurity
tempoxyz/gh-actions/vendor/peter-evans/create-pull-request

tempoxyz/gh-actions/vendor/peter-evans/create-pull-request

Reusable GitHub Actions for Tempo

4/10
Maintained action available
suzuki-shunsuke/tfaction/get-target-config

suzuki-shunsuke/tfaction/get-target-config

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

5/10
Maintained action available
alexellis/setup-arkade

alexellis/setup-arkade

Your favourite developer CLIs for GitHub Actions

3/10
getplumber/plumber

getplumber/plumber

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

7/10
lcv-ideas-software/.github/image

lcv-ideas-software/.github/image

LCV Ideas & Software

6/10
openzeppelin/dancekit/.github/workflow-templates/cargo-build

openzeppelin/dancekit/.github/workflow-templates/cargo-build

tools, primitives and pallets for container-chains

1/10
step-security/vitest-coverage-report-action

step-security/vitest-coverage-report-action

A GitHub Action to report vitest test coverage results. Secure drop-in replacement for davelosert/vitest-coverage-report-action.

10/10
Maintained by StepSecurity
quad4-software/meshchatx/.github/actions/verify-workspace-clean

quad4-software/meshchatx/.github/actions/verify-workspace-clean

All-in-one Reticulum client

5/10
Maintained action available
googleapis/code-suggester

googleapis/code-suggester

0/10
ai-dynamo/modelexpress/.github/actions/run-mx-dynamo-test

ai-dynamo/modelexpress/.github/actions/run-mx-dynamo-test

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10
deef0000dragon1/json-edit-action/

deef0000dragon1/json-edit-action/

Github Action to make a change to a JSON file

0/10
tanker187/stagehand/.github/actions/upload-v8-coverage

tanker187/stagehand/.github/actions/upload-v8-coverage

The AI Browser Automation Framework

5/10
Maintained action available
yonasbsd/opendal/.github/actions/test_behavior_binding_c

yonasbsd/opendal/.github/actions/test_behavior_binding_c

Apache OpenDAL: access data freely.

5/10
Maintained action available
chitranklabs/git-hygiene/.github/actions/setup-bot

chitranklabs/git-hygiene/.github/actions/setup-bot

The ultimate zero-dependency metadata validator for modern Git workflows. Enforce conventional commits, branch naming patterns, and PR titles with blazing-fast native Node.js performance.

8/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/database_schema_report

ministryofjustice/hmpps-github-shared-actions/.github/actions/database_schema_report

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
sarj-ai/repo-standards

sarj-ai/repo-standards

Deterministic repository architecture, delivery, pull-request, and API contract analysis.

4/10