StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

anolilab/workflows/step/codecov

anolilab/workflows/step/codecov

Shared Github Actions for Node.js projects and Monorepos.

5/10
Maintained action available
jasonkarns/setup-homebrew

jasonkarns/setup-homebrew

Set up Homebrew and (optionally) taps

2/10
step-security/create-or-update-pull-request-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/create-or-update-pull-request-action/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to create or update a pull request based on local changes. Secure drop-in replacement for gr2m/create-or-update-pull-request-action.

8/10
launchdarkly/ldcli/.github/actions/publish-npm

launchdarkly/ldcli/.github/actions/publish-npm

The official command line interface for managing LaunchDarkly feature flags.

4/10
Maintained action available
int128/kustomize-action

int128/kustomize-action

Run kustomize build in parallel in GitHub Actions

5/10
Maintained action available
launchdarkly/openfeature-dotnet-server/.github/actions/build-docs

launchdarkly/openfeature-dotnet-server/.github/actions/build-docs

An OpenFeature provider for the LaunchDarkly dotnet server SDK.

5/10
envoyproxy/toolshed/gh-actions/github/checkout

envoyproxy/toolshed/gh-actions/github/checkout

7/10
step-security/tauri-action

step-security/tauri-action

Build your Web application as a Tauri binary for macOS, Linux and Windows. Secure drop-in replacement for tauri-apps/tauri-action.

10/10
Maintained by StepSecurity
useblacksmith/golangci-lint-action

useblacksmith/golangci-lint-action

Official GitHub Action for golangci-lint using the Blacksmith cache

3/10
open-component-model/ocm-setup-action

open-component-model/ocm-setup-action

GitHub Action installing the OCM command-line tool

7/10
yonasbsd/greptimedb/.github/actions/setup-etcd-cluster

yonasbsd/greptimedb/.github/actions/setup-etcd-cluster

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10
Maintained action available
dmnemec/copy_file_to_another_repo_action

dmnemec/copy_file_to_another_repo_action

This GitHub Action copies a file from the current repository to a location in another repository

6/10
nschloe/action-cached-lfs-checkout

nschloe/action-cached-lfs-checkout

GitHub checkout action with LFS files pulled from cache

4/10
gitguardian/ggshield/actions/secret

gitguardian/ggshield/actions/secret

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

8/10
kroxylicious/kroxylicious/.github/actions/common/slack-notification

kroxylicious/kroxylicious/.github/actions/common/slack-notification

Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ

6/10
step-security/split-strings

step-security/split-strings

Github Action for splitting strings into parts by separator with limit. Secure drop-in replacement for xom9ikk/split.

8/10
Maintained by StepSecurity
adrise/matter-casting/.github/actions/dump-disk-info

adrise/matter-casting/.github/actions/dump-disk-info

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10
ledgerhq/ledger-live/tools/actions/fill

ledgerhq/ledger-live/tools/actions/fill

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10
Maintained action available
sonarsource/sonar-plugin-api/.actions/get-build-number

sonarsource/sonar-plugin-api/.actions/get-build-number

API to develop plugins for SonarQube (Server, Cloud) and SonarQube for IDE

8/10
cenkalti/backoff

cenkalti/backoff

โฑ The exponential backoff algorithm in Go

5/10
Maintained action available