StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

samuelmeuli/action-snapcraft

samuelmeuli/action-snapcraft

๐Ÿฆ GitHub Action for setting up Snapcraft

3/10
pytorch/torchft/test-infra/.github/actions/calculate-docker-image

pytorch/torchft/test-infra/.github/actions/calculate-docker-image

Fault tolerance for PyTorch (HSDP, LocalSGD, DiLoCo, Streaming DiLoCo)

6/10
step-security/woke-action-reviewdog/__builder_checkout_dir__/.github/actions/fill

step-security/woke-action-reviewdog/__builder_checkout_dir__/.github/actions/fill

woke GitHub Action using reviewdog. Secure drop-in replacement for get-woke/woke-action-reviewdog.

10/10
kong/wasmtime/.github/actions/install-rust

kong/wasmtime/.github/actions/install-rust

Standalone JIT-style runtime for WebAssembly, using Cranelift

3/10
knope-dev/action

knope-dev/action

2/10
ossf/scorecard-monitor

ossf/scorecard-monitor

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

4/10
dustin4444/metaplex-program-library/.github/actions/make-version-changes

dustin4444/metaplex-program-library/.github/actions/make-version-changes

Smart contracts maintained by the Metaplex team

2/10
yonasbsd/codeql/go/actions/public-layout.tsx

yonasbsd/codeql/go/actions/public-layout.tsx

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

3/10
Maintained action available
jupyterlab/maintainer-tools/.github/actions/public-layout.tsx

jupyterlab/maintainer-tools/.github/actions/public-layout.tsx

Workflows and Actions meant to be used by other repositories to make repo maintenance easier

7/10
nvidia/nemo/.github/actions/cancel-workflow

nvidia/nemo/.github/actions/cancel-workflow

A scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)

5/10
Maintained action available
grafana/mimir/operations/mimir-rules-action

grafana/mimir/operations/mimir-rules-action

Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.

8/10
caffeelake/cilium/../cilium-base-branch/set-runtime-image

caffeelake/cilium/../cilium-base-branch/set-runtime-image

eBPF-based Networking, Security, and Observability

3/10
ministryofjustice/payforlegalaid/.github/fill

ministryofjustice/payforlegalaid/.github/fill

8/10
step-security/configure-aws-credentials/__builder_checkout_dir__/.github/actions/privacy-check

step-security/configure-aws-credentials/__builder_checkout_dir__/.github/actions/privacy-check

Configure AWS credential environment variables for use in other GitHub Actions. Secure drop-in replacement for aws-actions/configure-aws-credentials.

10/10
kong/public-shared-actions/security-actions/semgrep

kong/public-shared-actions/security-actions/semgrep

Shared actions available to both public and private repositories

5/10
kong/public-shared-actions/code-check-actions/fill

kong/public-shared-actions/code-check-actions/fill

Shared actions available to both public and private repositories

5/10
step-security/release-action/_next/static/chunks/fe6e3408-5da4368e6503e536.js

step-security/release-action/_next/static/chunks/fe6e3408-5da4368e6503e536.js

An action which manages a github release. Secure drop-in replacement for ncipollo/release-action.

10/10
r-lib/actions/setup-r.action

r-lib/actions/setup-r.action

GitHub Actions for the R community

7/10
contrast-security-oss/integration-verify-github-action

contrast-security-oss/integration-verify-github-action

GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

4/10
step-security/retry/_next/static/chunks/app/(public)/layout-144711159e2a43c8.js

step-security/retry/_next/static/chunks/app/(public)/layout-144711159e2a43c8.js

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

10/10