StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/sonar-scanner-python/.actions/config-poetry

sonarsource/sonar-scanner-python/.actions/config-poetry

A wrapper around SonarScanner CLI, available on PyPI.

7/10
passy/tag-version-commit

passy/tag-version-commit

GitHub action for tagging commits whose title matches a version regex

2/10
elastic/docs-builder

elastic/docs-builder

6/10
1password/check-signed-commits-action

1password/check-signed-commits-action

GitHub Action to check PRs for signed commits

4/10
namespace-actions/upload-artifact

namespace-actions/upload-artifact

A variant of actions/upload-action that stores artifact archives to Namespace high-performance storage.

2/10
matlab-actions/setup-matlab

matlab-actions/setup-matlab

Set up your GitHub Actions workflow with a specific version of MATLAB.

5/10
anchore/workflows/.github/actions/create-tag-via-deploy-key

anchore/workflows/.github/actions/create-tag-via-deploy-key

reusable workflows to be used for the oss projects

7/10
m1ner79/github-twittction

m1ner79/github-twittction

GitHub Action to post on twitter when any event triggers on repository.

2/10
mosaicml/ci-testing/.github/actions/pytest-gpu

mosaicml/ci-testing/.github/actions/pytest-gpu

Aggregated CI test repo

2/10
nvidia/nemoclaw/.github/actions/resolve-sandbox-base-image

nvidia/nemoclaw/.github/actions/resolve-sandbox-base-image

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
issc29/poc-reminders-action

issc29/poc-reminders-action

1/10
bokuweb/sakimori/proxy

bokuweb/sakimori/proxy

Cross-platform supply-chain guard for CI: supervised-run audit/block (eBPF/ETW) + minimum-release-age proxy & lockfile check for npm, cargo, PyPI, NuGet.

2/10
Maintained action available
gittools/gitversion/.github/actions/cache-restore

gittools/gitversion/.github/actions/cache-restore

From git log to SemVer in no time

6/10
swiftylab/setup-swift

swiftylab/setup-swift

GitHub Action to setup Swift environment

5/10
Maintained action available
h0x0er/action-tmate

h0x0er/action-tmate

Debug your GitHub Actions via SSH by using tmate to get access to the runner system itself.

2/10
step-security/unity-builder

step-security/unity-builder

Build Unity projects for different platforms. Secure drop-in replacement for game-ci/unity-builder.

9/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-94341-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-94341-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/turbo/.github/actions/setup-protoc

yonasbsd/turbo/.github/actions/setup-protoc

Incremental bundler and build system optimized for JavaScriptย and TypeScript, written in Rust.

5/10
Maintained action available
pytorch/executorch/test-infra/.github/actions/teardown-linux

pytorch/executorch/test-infra/.github/actions/teardown-linux

On-device AI across mobile, embedded and edge for PyTorch

2/10
Maintained action available
docker/docker-agent-action/review-pr

docker/docker-agent-action/review-pr

A GitHub Action for running Docker Agent AI agents in your workflows.

4/10