StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

cyclonedx/gh-gomod-generate-sbom

cyclonedx/gh-gomod-generate-sbom

GitHub action to generate a CycloneDX SBOM for Go modules

5/10
sonarsource/sonar-html/.actions/config-maven

sonarsource/sonar-html/.actions/config-maven

Static analyzer for HTML used in Sonar ecosystem

6/10
hiero-ledger/solo/.github/actions/solo-image-cache

hiero-ledger/solo/.github/actions/solo-image-cache

An opinionated CLI tool to deploy and manage standalone test networks.

6/10
smartcontractkit/.github/actions/parse-and-mask-test-secrets

smartcontractkit/.github/actions/parse-and-mask-test-secrets

reusable GHA workflows and actions

5/10
Maintained action available
flcdrg/replace-multiple-action

flcdrg/replace-multiple-action

GitHub Action to replace multiple strings in files

4/10
Maintained action available
jupyterlab/maintainer-tools/.github/actions/base-setup

jupyterlab/maintainer-tools/.github/actions/base-setup

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

9/10
step-security/deployment-status/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/deployment-status/__builder_checkout_dir__/.github/actions/secure-download-artifact

GitHub action to create a deployment status update. Secure drop-in replacement for chrnorm/deployment-status.

9/10
kong/kongponents/.github/actions/ksai/.github/actions/ai-reviewer-federated

kong/kongponents/.github/actions/ksai/.github/actions/ai-reviewer-federated

๐Ÿฆ Kong Vue Component Library

8/10
step-integration-tests/auto-pdpr-test-28960-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-28960-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
hashicorp/actions-docker-build

hashicorp/actions-docker-build

Docker Build Action for CRT

6/10
tbhb/github-actions/.github/actions/setup-just

tbhb/github-actions/.github/actions/setup-just

Shared composite actions, reusable workflows, and Renovate presets for tbhb repositories

4/10
dustin4444/cache

dustin4444/cache

Cache dependencies and build outputs in GitHub Actions

4/10
yonasbsd/testcontainers-node/.github/actions/public-layout.tsx

yonasbsd/testcontainers-node/.github/actions/public-layout.tsx

Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

3/10
Maintained action available
danysam/gcs-cache/public-layout.tsx

danysam/gcs-cache/public-layout.tsx

Cache dependencies and build outputs in GitHub Actions using Google Cloud Storage

3/10
0xsequence/actions/git-commit

0xsequence/actions/git-commit

Common Github Actions

3/10
espressif/sync-jira-actions

espressif/sync-jira-actions

GitHub Actions for syncing the project with the Espressif Jira system

3/10
fish-shop/run-fishtape-tests

fish-shop/run-fishtape-tests

A GitHub action for running Fishtape tests.

8/10
kachick/wait-other-jobs

kachick/wait-other-jobs

โ˜• Wait for jobs, even across workflows

6/10
sonatype/actions/image

sonatype/actions/image

Public repository to keep Sonatype's GitHub Actions.

3/10
step-security/docker-build-push-action/_next/static/chunks/26927-93feb3475da0a4d5.js

step-security/docker-build-push-action/_next/static/chunks/26927-93feb3475da0a4d5.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10