StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

nanzm/get-time-action

nanzm/get-time-action

Get the time in the specified time zone

5/10
optum/react-hooks/.github/actions/setup

optum/react-hooks/.github/actions/setup

3/10
ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/public-layout.tsx

ministryofjustice/hmpps-manage-people-on-probation-ui/.github/actions/public-layout.tsx

HMPPS Manage People on Probation UI

7/10
crossplane-contrib/xpkg-action

crossplane-contrib/xpkg-action

A @github action for building @crossplane packages

2/10
step-security/ad-m-github-push-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/ad-m-github-push-action/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub actions to push back to repository eg. updated code. Secure drop-in replacement for ad-m/github-push-action.

10/10
rudderlabs/rudder-looker-actions/.github/actions/build-push-image

rudderlabs/rudder-looker-actions/.github/actions/build-push-image

Repository for RudderStack Looker Actions.

4/10
Maintained action available
veracode/github-actions-integration-helper

veracode/github-actions-integration-helper

Helper functions for the Veracode GitHub Workflow integration.

2/10
Maintained action available
step-integration-tests/auto-pdpr-test-88903-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88903-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
1466587594/get-current-time

1466587594/get-current-time

This action sets the current ISO8601 time to the time output and also provides readableTime, formattedTime, and many more digital outputs like year, day, second, etc. Useful for setting build times in subsequent steps, renaming your artifact, or keeping the same recorded time for the entire workflow.

5/10
Maintained action available
kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/image

kong/slsa-github-generator/__builder_checkout_dir__/.github/actions/image

Language-agnostic SLSA provenance generation for Github Actions

3/10
yonasbsd/turso/.github/shared/install_sqlite

yonasbsd/turso/.github/shared/install_sqlite

Turso Database is a project to build the next evolution of SQLite.

3/10
Maintained action available
oxsecurity/megalinter/flavors/ci_light

oxsecurity/megalinter/flavors/ci_light

๐Ÿฆ™ MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

7/10
ministryofjustice/opg-github-actions/actions/snyk-scan

ministryofjustice/opg-github-actions/actions/snyk-scan

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

8/10
politicalsphere/ci/.github/actions/ps-task/semgrep-cli

politicalsphere/ci/.github/actions/ps-task/semgrep-cli

CI/CD pipelines and GitHub Actions for Political Sphere

2/10
reitzig/actions-asciidoctor

reitzig/actions-asciidoctor

GitHub Action that installs asciidoctor

6/10
nvidia/nemoclaw/.github/actions/ci-wechat-runtime-audit

nvidia/nemoclaw/.github/actions/ci-wechat-runtime-audit

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
shallwefootball/upload-s3-action

shallwefootball/upload-s3-action

github action for upload to S3 โ˜๏ธ

1/10
ozi-project/publish

ozi-project/publish

OZI action - publish releases to PyPI; and mirror releases, signature bundles, and provenance in a tagged release

6/10
step-security/maven-dependency-submission-action

step-security/maven-dependency-submission-action

GitHub Action for submitting Maven dependencies. Secure drop-in replacement for advanced-security/maven-dependency-submission-action.

10/10
smartcontractkit/chainlink-github-actions/docker/build-push

smartcontractkit/chainlink-github-actions/docker/build-push

Common action to run chainlink-testing-framework based tests in github ci

3/10