StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

carpentries/actions/check-valid-pr

carpentries/actions/check-valid-pr

GitHub Actions for use in Carpentries-style lessons

4/10
Maintained action available
noamelf/codeowner-multi-approval-action

noamelf/codeowner-multi-approval-action

Extends GitHub's codeowners feature by requiring all codeowners listed to approve a pull request, and not just one of them

3/10
michaelhinrichs/simple-icons/.github/actions/get-labels

michaelhinrichs/simple-icons/.github/actions/get-labels

SVG icons for popular brands

3/10
bburky/digestabot

bburky/digestabot

Github Action to automatically update digests for container images.

3/10
charmbracelet/vhs-action

charmbracelet/vhs-action

Keep your GIFs up to date with VHS + GitHub actions ๐Ÿ“ฝ๏ธ

4/10
sasobadovinac/freecad/.github/workflows/actions/linux/build

sasobadovinac/freecad/.github/workflows/actions/linux/build

Fork of the official git master branch of FreeCAD

7/10
coveo/ui-kit/.github/actions/playwright-atomic-search-commerce-react

coveo/ui-kit/.github/actions/playwright-atomic-search-commerce-react

Coveo UI kit repository, home of @coveo/headless, @coveo/atomic, and more.

4/10
Maintained action available
cloudquery/setup-cloudquery

cloudquery/setup-cloudquery

Setup CloudQuery CLI in GitHub Actions workflows

8/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/setup-wiremock

ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/setup-wiremock

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

4/10
coactions/dynamic-matrix

coactions/dynamic-matrix

๐Ÿšง MOVED TO https://github.com/ansible/actions/tree/main/matrix

5/10
stackadapt/find-comment

stackadapt/find-comment

A GitHub action to find an issue or pull request comment

2/10
kusaridev/kusari-cli/__builder_checkout_dir__/.github/actions/privacy-check

kusaridev/kusari-cli/__builder_checkout_dir__/.github/actions/privacy-check

Command line interface for Kusari

6/10
step-security/create-pull-request

step-security/create-pull-request

A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

10/10
Maintained by StepSecurity
amartyajha/airbyte/.github/actions/runner-prepare-for-build

amartyajha/airbyte/.github/actions/runner-prepare-for-build

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

0/10
cloudposse/github-action-pre-commit

cloudposse/github-action-pre-commit

A GitHub action to run pre-commit and allow overriding the git config user name and email

5/10
warpbuilds/cache

warpbuilds/cache

Cache dependencies and build outputs in GitHub Actions

3/10
Maintained action available
pytorch/multipy/.github/actions/setup-ssh

pytorch/multipy/.github/actions/setup-ssh

torch::deploy (multipy for non-torch uses) is a system that lets you get around the GIL problem by running multiple Python interpreters in a single C++ process.

1/10
cloudposse/github-action-preview-environment-controller

cloudposse/github-action-preview-environment-controller

Github action to manage deploy/undeploy for preview environments depends of PR labels

6/10
step-security/gh-find-current-pr/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/gh-find-current-pr/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action for finding the Pull Request (PR) associated with the current SHA. Secure drop-in replacement for jwalton/gh-find-current-pr.

10/10
qoomon/actions--setup-git

qoomon/actions--setup-git

Setup Git config to be ready for git commit and push commands

3/10