StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

project-tick/project-tick/.github/actions/mnv/test_artifacts

project-tick/project-tick/.github/actions/mnv/test_artifacts

Project Tick is a project dedicated to providing developers with ease of use and users with long-lasting software. SoT: https://git.projecttick.org/project-tick

7/10
step-security/setup-oras

step-security/setup-oras

Set up your GitHub Actions workflow with a specific version of ORAS. Secure drop-in replacement for oras-project/setup-oras.

10/10
Maintained by StepSecurity
caffeelake/beyla/actions/public-layout.tsx

caffeelake/beyla/actions/public-layout.tsx

eBPF-based autoinstrumentation of HTTP and HTTPS services

3/10
Maintained action available
mockoon/cli-action

mockoon/cli-action

GitHub Action for Mockoon CLI

5/10
ministryofjustice/laa-civil-manage/.github/actions/build_and_push

ministryofjustice/laa-civil-manage/.github/actions/build_and_push

Frontend service to allow legal providers to manage their applications for civil legal aid.

8/10
supercharge/mongodb-github-action

supercharge/mongodb-github-action

Use MongoDB in GitHub Actions

5/10
pytorch/rl/test-infra/.github/actions/pull-docker-image

pytorch/rl/test-infra/.github/actions/pull-docker-image

A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.

3/10
Maintained action available
grafana/shared-workflows/actions/setup-argo

grafana/shared-workflows/actions/setup-argo

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

8/10
erclu/check-crlf

erclu/check-crlf

GitHub Action to check for files with CRLF line endings

4/10
caffeelake/pytorch-lightning/.github/actions/pkg-check

caffeelake/pytorch-lightning/.github/actions/pkg-check

Pretrain, finetune and deploy AI models on multiple GPUs, TPUs with zero code changes.

4/10
Maintained action available
esp-rs/xtensa-toolchain

esp-rs/xtensa-toolchain

A GitHub Action to install the Rust compiler fork targeting Xtensa devices

4/10
conormacbride/install-package

conormacbride/install-package

GitHub Action to install packages from brew, brew cask, apt and choco.

4/10
sonarsource/sonar-dummy-js/.actions/public-layout.tsx

sonarsource/sonar-dummy-js/.actions/public-layout.tsx

7/10
zattoo/changelog

zattoo/changelog

๐Ÿ“‹ GitHub Action to validate CHANGELOG.md files and indicate if the changelog should be modified based on watch folders.

3/10
certora/certora-run-action

certora/certora-run-action

Certora Run GitHub Action

6/10
grafana/docker-slack-message/_shared-workflows-dockerhub-login/actions/get-vault-secrets

grafana/docker-slack-message/_shared-workflows-dockerhub-login/actions/get-vault-secrets

Very simple tool to send Slack messages. Built into a docker image

8/10
starship/crowdin-pretranslate-action

starship/crowdin-pretranslate-action

2/10
envoy/install-helm-docs

envoy/install-helm-docs

Github Action to install helm docs in CI flow

4/10
step-security/allure-report-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/allure-report-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Allure Report action with history. Secure drop-in replacement for simple-elf/allure-report-action.

10/10
dustin4444/attest-build-provenance

dustin4444/attest-build-provenance

Action for generating build provenance attestations for workflow artifacts

6/10