StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

devantler-tech/ksail/.github/actions/ksail-tenant-test

devantler-tech/ksail/.github/actions/ksail-tenant-test

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
launchdarkly/cpp-sdks/.github/actions/ci

launchdarkly/cpp-sdks/.github/actions/ci

C++ Client/Server SDKs

6/10
orcasecurity/shiftleft-sast-action

orcasecurity/shiftleft-sast-action

Orca Security - SAST GitHub Action

6/10
sonarsource/gh-action-lt-backlog/importissue

sonarsource/gh-action-lt-backlog/importissue

Automate GitHub backlog and Kanbans

6/10
step-security/slsa-github-generator/.github/actions/detect-workflow-js

step-security/slsa-github-generator/.github/actions/detect-workflow-js

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-97098-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-97098-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
ethers-io/hijack-npm-action

ethers-io/hijack-npm-action

GitHub action to run a faux NPM registry which intercepts select npm packages and injects local versions.

3/10
neondatabase/delete-branch-action

neondatabase/delete-branch-action

4/10
vitessio/vitess/.github/actions/tune-os

vitessio/vitess/.github/actions/tune-os

Vitess is a database clustering system for horizontal scaling of MySQL.

8/10
step-security/jest-coverage-action-demo/windows/fill

step-security/jest-coverage-action-demo/windows/fill

9/10
caffeelake/taipy/.github/actions/gui-test/e2e

caffeelake/taipy/.github/actions/gui-test/e2e

Turns Data and AI algorithms into production-ready web applications in no time.

3/10
step-security/setup-rust-toolchain

step-security/setup-rust-toolchain

Setup a specific Rust toolchain with extra features like problem matchers. Secure drop-in replacement for actions-rust-lang/setup-rust-toolchain.

10/10
Maintained by StepSecurity
pact-foundation/pact-broker-cli

pact-foundation/pact-broker-cli

A CLI client for the Pact Broker. Publish/retrieve pacts and verification results.

4/10
Maintained action available
kitabisa/sonarqube-action

kitabisa/sonarqube-action

Integrate SonarQube scanner to GitHub Actions

5/10
lfreleng-actions/sonatype-lifecycle-scan-action

lfreleng-actions/sonatype-lifecycle-scan-action

Performs a Sonatype Lifecycle security scan/audit of a repository

8/10
step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/fill

step-security/setup-gh-cli-action/__builder_checkout_dir__/.github/actions/fill

A GitHub action that installs or updates the gh CLI. Secure drop-in replacement for sersoft-gmbh/setup-gh-cli-action.

10/10
autifyhq/actions-web-test-run

autifyhq/actions-web-test-run

Run a test scenario or test plan on Autify for Web

4/10
yonasbsd/session-desktop/actions/setup_and_build

yonasbsd/session-desktop/actions/setup_and_build

Session Desktop - A Decentralized, Onion Routed, Private Messenger

2/10
nvidia-nemo/speech/ci-templates/.github/actions/check-nvidia-sso

nvidia-nemo/speech/ci-templates/.github/actions/check-nvidia-sso

A scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)

5/10
Maintained action available
mgrybyk-org/allure-report-branch-js-action

mgrybyk-org/allure-report-branch-js-action

Allure Report with history per branch (JS)

6/10