StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

useblacksmith/cache

useblacksmith/cache

Cache dependencies and build outputs in GitHub Actions

2/10
devantler/harden-runner

devantler/harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

3/10
dustin4444/solana-web3.js/.github/workflows/actions/install-dependencies

dustin4444/solana-web3.js/.github/workflows/actions/install-dependencies

Solana JavaScript SDK

3/10
micronaut-projects/github-actions/post-release

micronaut-projects/github-actions/post-release

3/10
Maintained action available
ietf-tools/workflow-dispatch-action

ietf-tools/workflow-dispatch-action

GitHub Action that triggers a workflow run in any repository and waits for its completion.

4/10
step-security/github-action-aerospike/_next/static/chunks/40430-9b4d144f4e63e85b.js

step-security/github-action-aerospike/_next/static/chunks/40430-9b4d144f4e63e85b.js

GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

10/10
elastic/ecs-dotnet/.github/workflows/bootstrap

elastic/ecs-dotnet/.github/workflows/bootstrap

6/10
sredevopsorg/kserve/.github/actions/minikube-setup

sredevopsorg/kserve/.github/actions/minikube-setup

Standardized Serverless ML Inference Platform on Kubernetes

2/10
nvidia/numba-cuda/.github/actions/fetch_ctk

nvidia/numba-cuda/.github/actions/fetch_ctk

The CUDA target for Numba

6/10
valora-xyz/wallet-stack/.github/actions/yarn-install

valora-xyz/wallet-stack/.github/actions/yarn-install

A framework for quickly building mobile wallet applications

6/10
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/wearerequired-slack-messaging-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/wearerequired-slack-messaging-action

Forked from https://github.com/wearerequired/slack-messaging-action

3/10
dotnet/actions-create-pull-request

dotnet/actions-create-pull-request

A GitHub action to create a pull request for changes to your repository in the actions workspace

3/10
action-pack/bump

action-pack/bump

Action to generate a version number.

4/10
Maintained action available
grafana/grafana/.github/actions/website-sync

grafana/grafana/.github/actions/website-sync

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

6/10
step-security/setup-applanga-cli

step-security/setup-applanga-cli

Secure drop-in replacement for applanga/setup-applanga-cli.

8/10
Maintained by StepSecurity
slsa-framework/slsa-github-generator/.github/actions/secure-download-folder

slsa-framework/slsa-github-generator/.github/actions/secure-download-folder

Language-agnostic SLSA provenance generation for Github Actions

4/10
dephraiim/translate-readme

dephraiim/translate-readme

Translate Github Readme to any other Language

2/10
repo-sync/pull-request

repo-sync/pull-request

โคต๏ธ A GitHub Action for creating pull requests

6/10
sslcom/actions-codesigner

sslcom/actions-codesigner

GitHub Action for CodeSigner by SSL.com

2/10
step-security/snyk-actions/maven-3-jdk-20

step-security/snyk-actions/maven-3-jdk-20

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

10/10
Maintained by StepSecurity