StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

envoyproxy/toolshed/actions/jq

envoyproxy/toolshed/actions/jq

7/10
nejczdovc/comment-pr

nejczdovc/comment-pr

Github action for commenting in the PR

3/10
firestoned/github-actions/security/license-check

firestoned/github-actions/security/license-check

3/10
step-security/swiftylab-ci/actions/sidebar.tsx

step-security/swiftylab-ci/actions/sidebar.tsx

Support files and configurations for SwiftyLab's CI. Secure drop-in replacement for SwiftyLab/ci.

10/10
check-spelling/check-spelling/../check-spelling-actions/checkout-merge

check-spelling/check-spelling/../check-spelling-actions/checkout-merge

Spelling checker action to check spelling in repositories / pull requests / commits

5/10
actions-security-demo/pytorch/.github/actions/setup-xpu

actions-security-demo/pytorch/.github/actions/setup-xpu

Tensors and Dynamic neural networks in Python with strong GPU acceleration

2/10
pisberg/vibetags/action/locked-files

pisberg/vibetags/action/locked-files

VibeTags is a Java annotation processor that acts as AI guardrails for code generation tools like Cursor, Claude, Gemini, and Codex CLI. It allows developers to control AI behavior through simple annotations, protecting critical code and guiding AI implementations.

7/10
devantler-tech/composite-actions/todos-action

devantler-tech/composite-actions/todos-action

Actions designed to streamline CI/CD processes.

4/10
Maintained action available
launchdarkly/erlang-server-sdk/.github/actions/publish

launchdarkly/erlang-server-sdk/.github/actions/publish

LaunchDarkly Server-Side SDK for Erlang/Elixir

5/10
cookieai-jar/teleport/.github/actions/difftest

cookieai-jar/teleport/.github/actions/difftest

The easiest, and most secure way to access and protect all of your infrastructure.

3/10
navikt/digestabot

navikt/digestabot

A Github Action to automatically update digests for container images.

7/10
step-security/jest-coverage-action-demo/.github/actions/image

step-security/jest-coverage-action-demo/.github/actions/image

9/10
chainguard-actions/jawills-sf-deploy

chainguard-actions/jawills-sf-deploy

2/10
approved-3rd-party-actions/k6-action

approved-3rd-party-actions/k6-action

k6 is now available as a GitHub Action

3/10
step-security/push-to-gcr-github-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/push-to-gcr-github-action/__builder_checkout_dir__/.github/actions/privacy-check

An action that build docker image and push to Google Cloud Registry and Google Artifact Registry. Secure drop-in replacement for RafikFarhad/push-to-gcr-github-action.

10/10
hecrj/setup-rust-action

hecrj/setup-rust-action

Set up a specific Rust toolchain in your GitHub workflows

5/10
sonarsource/sonarqube-scan-action/install-build-wrapper

sonarsource/sonarqube-scan-action/install-build-wrapper

6/10
febiosoftware/febio-workflows/.github/actions/public-layout.tsx

febiosoftware/febio-workflows/.github/actions/public-layout.tsx

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

2/10
pytorch/vision/test-infra/.github/actions/public-layout.tsx

pytorch/vision/test-infra/.github/actions/public-layout.tsx

Datasets, Transforms and Models specific to Computer Vision

5/10
Maintained action available
product-os/setup-skopeo-action

product-os/setup-skopeo-action

Setup skopeo in a GitHub Actions workflow

4/10