StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-15076-2/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-15076-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/manual-approval/__builder_checkout_dir__/.github/actions/privacy-check

step-security/manual-approval/__builder_checkout_dir__/.github/actions/privacy-check

Pause your GitHub Actions workflow and request manual approval from set approvers before continuing. Secure drop-in replacement for trstringer/manual-approval.

10/10
dorny/test-reporter

dorny/test-reporter

Displays test results from popular testing frameworks directly in GitHub

6/10
pytorch/test-infra/test-infra/.github/actions/setup-binary-upload

pytorch/test-infra/test-infra/.github/actions/setup-binary-upload

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10
Maintained action available
reearth/changed-files

reearth/changed-files

:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.

3/10
redefinedev/redefine-action

redefinedev/redefine-action

This GitHub Action installs, configures & runs Redefine to optimize CI execution time and resources.

3/10
agslima/app-stayhealthy-pipeline/.github/actions/fill

agslima/app-stayhealthy-pipeline/.github/actions/fill

Governed CI/CD pipeline demonstrating policy-driven delivery, GitOps releases, supply-chain integrity, and risk-based governance practices using a full-stack reference application.

6/10
bduff9/use-npmrc

bduff9/use-npmrc

2/10
transferwise/actions-next-bundle-analyzer

transferwise/actions-next-bundle-analyzer

Github Action that analyses page bundle sizes from a Next.js build

3/10
step-security/ad-m-github-push-action

step-security/ad-m-github-push-action

GitHub actions to push back to repository eg. updated code. Secure drop-in replacement for ad-m/github-push-action.

8/10
Maintained by StepSecurity
julienkode/team-labeler-action

julienkode/team-labeler-action

โšก๏ธ Github action to label your pull requests based on the author name โšก๏ธ

4/10
Maintained action available
steve-todorov/oidc-debugger-action

steve-todorov/oidc-debugger-action

Simple action to debug JWT claims generated in Github Actions for OIDC

3/10
selfxyz/self/.github/actions/cache-sdk-build

selfxyz/self/.github/actions/cache-sdk-build

Prove your self

2/10
Maintained action available
arcxp/datadog-service-catalog-metadata-provider

arcxp/datadog-service-catalog-metadata-provider

This repository houses the Datadog Service Catalog Metadata Provider. With this tool you can use GitHub Actions to provide Datadog with the metadata for your service. For more information on what the Datadog Service Catalog is: https://www.datadoghq.com/product/service-catalog/

4/10
denoland/setup-deno

denoland/setup-deno

Set up your GitHub Actions workflow with a specific version of Deno

6/10
launchdarkly/ios-client-sdk/.github/actions/update-versions

launchdarkly/ios-client-sdk/.github/actions/update-versions

LaunchDarkly Client-side SDK for iOS (Swift and Obj-C)

6/10
ministryofjustice/laa-data-claims-api/.github/actions/cleanup_branch

ministryofjustice/laa-data-claims-api/.github/actions/cleanup_branch

LAA Data Claims API

8/10
grafana/writers-toolkit/publish-technical-documentation-release

grafana/writers-toolkit/publish-technical-documentation-release

Technical documentation guidelines for Grafana Labs documentation

8/10
slsa-framework/slsa-github-generator/.github/actions/sign-attestations

slsa-framework/slsa-github-generator/.github/actions/sign-attestations

Language-agnostic SLSA provenance generation for Github Actions

4/10
hashicorp/actions-hc-releases-promote

hashicorp/actions-hc-releases-promote

GitHub Action for promoting metadata and artifacts using hc-releases

6/10