StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

koki-develop/hub-purge-action

koki-develop/hub-purge-action

๐Ÿงน Action to clear GitHub image caches.

2/10
appthreat/sast-scan-action

appthreat/sast-scan-action

GitHub action for performing SAST scanning using various oss tools such as gitleaks, bandit, findsecbugs etc

3/10
mevisoft/formbricks/.github/actions/image

mevisoft/formbricks/.github/actions/image

4/10
Maintained action available
useblacksmith/checkout/public-layout.tsx

useblacksmith/checkout/public-layout.tsx

3/10
step-security/terraform-cloud-provider-publish/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/terraform-cloud-provider-publish/__builder_checkout_dir__/.github/actions/secure-download-artifact

An action for publishing terraform providers to a private registry. Secure drop-in replacement for thechrisjohnson/terraform-cloud-provider-publish.

8/10
nvidia/nautobot-app-nvdatamodels/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

nvidia/nautobot-app-nvdatamodels/.github/.tmp/.generated-actions/run-pypi-publish-in-docker-container

A Nautobot plugin which provides data models for NVIDIA products

5/10
mercari/actions-runner-controller/.github/actions/execute-assert-arc-e2e

mercari/actions-runner-controller/.github/actions/execute-assert-arc-e2e

Kubernetes controller for GitHub Actions self-hosted runners

4/10
tanker187/playwright/.github/actions/run-test

tanker187/playwright/.github/actions/run-test

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

4/10
ipdxco/unified-github-workflows/.github/actions/image

ipdxco/unified-github-workflows/.github/actions/image

Automatically distribute GitHub Actions workflow across repositories.

3/10
Maintained action available
step-security/softprops-turnstyle

step-security/softprops-turnstyle

๐ŸŽŸ๏ธA GitHub Action for serializing workflow runs. Secure drop-in replacement for softprops/turnstyle.

10/10
Maintained by StepSecurity
saleor/saleor-internal-actions/sbom-generator

saleor/saleor-internal-actions/sbom-generator

Collection of GitHub Actions used internally at Saleor

8/10
anothrnick/github-tag-action

anothrnick/github-tag-action

A Github Action to tag a repo on merge.

6/10
home-assistant/builder/actions/build-image

home-assistant/builder/actions/build-image

Home Assistant builder script

8/10
dustin4444/cdp-sdk/.github/actions/fetch-docs-artifact

dustin4444/cdp-sdk/.github/actions/fetch-docs-artifact

Client libraries for managing EVM and Solana wallets while relying on CDP to secure private keys.

5/10
Maintained action available
imaralabs-ai/coder/.github/actions/setup-gnu-tools

imaralabs-ai/coder/.github/actions/setup-gnu-tools

Secure environments for developers and their agents

4/10
dargon789/hardhat/.github/actions/setup-env

dargon789/hardhat/.github/actions/setup-env

Hardhat is a development environment to compile, deploy, test, and debug your Ethereum software.

4/10
Maintained action available
rustsec/audit-check

rustsec/audit-check

๐Ÿ›ก๏ธ GitHub Action for security audits

3/10
bots-house/ghcr-delete-image-action

bots-house/ghcr-delete-image-action

โ™ป๏ธ Delete GitHub Container Registry image by tag

3/10
sonarsource/sonar-flex/.actions/get-build-number

sonarsource/sonar-flex/.actions/get-build-number

6/10
ministryofjustice/laa-submit-crime-forms/.github/actions/fill

ministryofjustice/laa-submit-crime-forms/.github/actions/fill

This is the repository for the replacement of services: Claim a non-standard magistrates' court payment and Apply for prior authority to incur disbursements

8/10