StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/secrets-sync-action/__builder_checkout_dir__/.github/actions/image

step-security/secrets-sync-action/__builder_checkout_dir__/.github/actions/image

A Github Action that can sync secrets from one repository to many others. Secure drop-in replacement for jpoehnelt/secrets-sync-action.

10/10
grafana/alloy/actions/backport

grafana/alloy/actions/backport

OpenTelemetry Collector distribution with programmable pipelines

6/10
step-security/test-reporter/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/test-reporter/__builder_checkout_dir__/.github/actions/secure-download-artifact

Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for dorny/test-reporter.

8/10
caffeelake/bun/.github/actions/setup-bun

caffeelake/bun/.github/actions/setup-bun

Incredibly fast JavaScript runtime, bundler, test runner, and package manager โ€“ all in one

4/10
Maintained action available
gradio-app/github/actions/copy-demos

gradio-app/github/actions/copy-demos

github helpers for gradio repos!

0/10
coursgranja91-hash/erk/.github/actions/erk-remote-setup

coursgranja91-hash/erk/.github/actions/erk-remote-setup

erk is a tool for the orchestration and management of plan-oriented agentic engineering.

3/10
onekeyhq/actions/slack-notify-webhook

onekeyhq/actions/slack-notify-webhook

Github Actions

1/10
reviewdog/action-nimlint

reviewdog/action-nimlint

Run nim check with reviewdog

5/10
Maintained action available
step-security/buf-setup-action

step-security/buf-setup-action

Secure drop-in replacement for bufbuild/buf-setup-action.

9/10
Maintained by StepSecurity
step-security/gradle-actions/sidebar.tsx

step-security/gradle-actions/sidebar.tsx

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub. Secure drop-in replacement for gradle/actions.

10/10
launchdarkly/ios-client-sdk/.github/actions/contract-tests

launchdarkly/ios-client-sdk/.github/actions/contract-tests

LaunchDarkly Client-side SDK for iOS (Swift and Obj-C)

5/10
Maintained action available
chainguard-actions/dopplerhq-secrets-fetch-action

chainguard-actions/dopplerhq-secrets-fetch-action

2/10
kroxylicious/kroxylicious/.github/actions/common/setup-minikube

kroxylicious/kroxylicious/.github/actions/common/setup-minikube

Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ

7/10
ai-dynamo/modelexpress/.github/actions/run-mx-streamer-test

ai-dynamo/modelexpress/.github/actions/run-mx-streamer-test

Model Express is a Rust-based component meant to be placed next to existing model inference systems to speed up their startup times and improve overall performance.

6/10
slsa-framework/slsa-github-generator/.github/'/secure-builder-checkout

slsa-framework/slsa-github-generator/.github/'/secure-builder-checkout

Language-agnostic SLSA provenance generation for Github Actions

4/10
step-integration-tests/auto-pdpr-test-69915-3/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-69915-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
zedthree/clang-tidy-review

zedthree/clang-tidy-review

Create a pull request review based on clang-tidy warnings

3/10
nvidia-rtx/godot/.github/actions/godot-project-export

nvidia-rtx/godot/.github/actions/godot-project-export

NVIDIA fork of Godot Engine โ€“ Multi-platform 2D and 3D game engine

3/10
Maintained action available
step-security/secure-workflows/public-layout.tsx

step-security/secure-workflows/public-layout.tsx

Orchestrate GitHub Actions Security

8/10
oxsecurity/megalinter

oxsecurity/megalinter

๐Ÿฆ™ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

8/10