StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

caffeelake/claude-code/.github/actions/claude-code-action

caffeelake/claude-code/.github/actions/claude-code-action

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

5/10
Maintained action available
step-security/action-add-labels

step-security/action-add-labels

๐Ÿท๏ธ GitHub Action to add labels. Secure drop-in replacement for actions-ecosystem/action-add-labels.

9/10
Maintained by StepSecurity
sonarsource/sonarqube-scan-action/image

sonarsource/sonarqube-scan-action/image

5/10
step-security/ghaction-setup-containerd

step-security/ghaction-setup-containerd

GitHub Action to set up containerd. Secure drop-in replacement for crazy-max/ghaction-setup-containerd.

10/10
Maintained by StepSecurity
step-security/github-app-token/__builder_checkout_dir__/.github/actions/privacy-check

step-security/github-app-token/__builder_checkout_dir__/.github/actions/privacy-check

Impersonate a GitHub App in a GitHub Action. Secure drop-in replacement for tibdex/github-app-token.

10/10
rickstaa/action-update-semver

rickstaa/action-update-semver

Updates major/minor release tags on a tag push.

3/10
vmactions/netbsd-vm

vmactions/netbsd-vm

Test your code in a real NetBSD virtual machine on GitHub Actions -- QEMU-powered, with SSH and two-way folder sync

6/10
technote-space/create-pr-action

technote-space/create-pr-action

GitHub Actions to manage PullRequest

2/10
dopplerhq/secrets-fetch-action

dopplerhq/secrets-fetch-action

Securely inject Doppler secrets into your GitHub Actions.

6/10
bjia56/setup-cosmocc

bjia56/setup-cosmocc

Download and install cosmocc on GitHub Actions

3/10
grafana/loki/actions/metrics-collector

grafana/loki/actions/metrics-collector

Like Prometheus, but for logs.

7/10
arduino/setup-protoc

arduino/setup-protoc

GitHub Action to setup the protoc compiler for protocol buffers

7/10
nvidia/cccl-gha/.github/actions/image

nvidia/cccl-gha/.github/actions/image

Github Action infrastructure for CCCL

4/10
step-security/actions-label-merge-conflict

step-security/actions-label-merge-conflict

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

8/10
Maintained by StepSecurity
step-security/slsa-github-generator/.github/actions/null

step-security/slsa-github-generator/.github/actions/null

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
yonasbsd/joplin/.github/workflows/shared/setup-build-environment

yonasbsd/joplin/.github/workflows/shared/setup-build-environment

Joplin - an open source note taking and to-do application with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.

4/10
Maintained action available
elide-tools/setup-llvm

elide-tools/setup-llvm

A GitHub Action for downloading and installing LLVM and Clang binaries.

2/10
takaishi/tfclean

takaishi/tfclean

tfclean is tool to remove applied moved block, import block, etc

5/10
Maintained action available
step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-json/oembed/1.0/embed/index.html

step-security/ansible-galaxy-action/__builder_checkout_dir__/.github/actions/wp-json/oembed/1.0/embed/index.html

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

10/10
agslima/app-stayhealthy-pipeline/.github/actions/resolve-run-metadata

agslima/app-stayhealthy-pipeline/.github/actions/resolve-run-metadata

Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.

6/10