StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

primait/setup-yq

primait/setup-yq

6/10
rudderlabs/rudder-sdk-kotlin/.github/actions/setup-and-find-modules

rudderlabs/rudder-sdk-kotlin/.github/actions/setup-and-find-modules

Kotlin Android SDK and Kotlin JVM for RudderStack - the Customer Data Platform for Developers.

6/10
microsoft/variable-substitution

microsoft/variable-substitution

Enable GitHub developers to parameterize the values in their config files from a GitHub Action workflow

0/10
elide-dev/labs-openjdk/.github/actions/upload-bundles

elide-dev/labs-openjdk/.github/actions/upload-bundles

JDK fork for building GraalVM CE.

5/10
alibaba/open-code-review

alibaba/open-code-review

Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

6/10
telemetryforge/agent/.github/actions/get-package-name

telemetryforge/agent/.github/actions/get-package-name

Telemetry Forge Agent is a stable, secure by default, OSS (Apache-licensed) downstream distribution of Fluent Bit with predictable releases and long-term supported versions for 24 months.

3/10
Maintained action available
peter-evans/close-issue

peter-evans/close-issue

A GitHub action to close an issue

4/10
nvidia/k8s-test-infra/.github/actions/public-layout.tsx

nvidia/k8s-test-infra/.github/actions/public-layout.tsx

Simulate NVIDIA infrastructure (e.g. GPU) on CPU nodes in Kubernetes :coffee:๏ธ

8/10
ibnesayeed/repo-attrs

ibnesayeed/repo-attrs

A GitHub Action to make various attributes of a repository available as variables

3/10
vancanhuit/url-shortener-web/.github/actions/dagger-setup

vancanhuit/url-shortener-web/.github/actions/dagger-setup

Simple URL Shortener web built with Golang and Tailwind CSS to learn various development practices and CI/CD

0/10
step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/fill

step-security/tj-actions-glob/__builder_checkout_dir__/.github/actions/fill

:octocat: Github action to match glob patterns with support for matching deleted files. Secure drop-in replacement for tj-actions/glob.

9/10
elastic/elastic-otel-dotnet/.github/workflows/public-layout.tsx

elastic/elastic-otel-dotnet/.github/workflows/public-layout.tsx

Elastic OpenTelemetry .NET Distribution

8/10
step-integration-tests/auto-pdpr-test-06314-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-06314-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
winterjung/comment

winterjung/comment

GitHub action to comment on pr, issue

3/10
launchdarkly/openfeature-php-server/.github/actions/build-docs

launchdarkly/openfeature-php-server/.github/actions/build-docs

An OpenFeature provider for the LaunchDarkly PHP server SDK.

5/10
jahid11978/openclaw.ai/.github/actions/setup-pnpm-store-cache

jahid11978/openclaw.ai/.github/actions/setup-pnpm-store-cache

Your own personal AI assistant. Any OS. Any Platform. The lobster way.

4/10
Maintained action available
paddlehq/repo-file-sync-action/.github/actions/resolve-generated-paths

paddlehq/repo-file-sync-action/.github/actions/resolve-generated-paths

๐Ÿ”„ GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.

3/10
Maintained action available
vision-web3-foundation/ci-workflows/.github/actions/fill

vision-web3-foundation/ci-workflows/.github/actions/fill

3/10
gittools/build-images/.github/actions/image

gittools/build-images/.github/actions/image

Docker build images for GitVersion

4/10
Maintained action available
shiftleftsecurity/scan-action

shiftleftsecurity/scan-action

5/10