StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/setup-gcloud/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/setup-gcloud/__builder_checkout_dir__/.github/actions/public-layout.tsx

A GitHub Action for installing and configuring the gcloud CLI. Secure drop-in replacement for google-github-actions/setup-gcloud.

8/10
febiosoftware/febio-workflows/.github/actions/repo-artifacts-release

febiosoftware/febio-workflows/.github/actions/repo-artifacts-release

Reusable workflows and actions specific to FEBio, FEBioStudio, and FEBio plugins

2/10
Maintained action available
aerospike/java-object-mapper/.github/actions/get-version

aerospike/java-object-mapper/.github/actions/get-version

The Java Object Mapper is a simple, light-weight framework used to map POJOs to the Aerospike database. Using simple annotations or a configuration YAML file to describe how to map the data to Aerospike, the project takes the tedium out of mapping the data through the powerful, low level interface.

6/10
grafana/k6-extension-actions/k6-versions-to-test

grafana/k6-extension-actions/k6-versions-to-test

Reusable composite GitHub actions to support k6 extension development.

4/10
dupuy/action-verify-labels

dupuy/action-verify-labels

Verify labels in pull request are assigned or not

3/10
protocolbuffers/protobuf-ci/../../_actions/current/internal/bazel-setup

protocolbuffers/protobuf-ci/../../_actions/current/internal/bazel-setup

A shared repository for Protobuf CI actions

4/10
manticoresoftware/semver-tagger-action

manticoresoftware/semver-tagger-action

SemVer Tagger GitHub action

3/10
ai-dynamo/velo/.github/actions/sccache-setup

ai-dynamo/velo/.github/actions/sccache-setup

6/10
sonarsource/sonar-java/.actions/public-layout.tsx

sonarsource/sonar-java/.actions/public-layout.tsx

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

4/10
Maintained action available
webiny/action-conventional-commits

webiny/action-conventional-commits

Ensures that all commits are following the conventional-commits standard.

3/10
modeseven-lfreleng-actions/helm-chart-publish-action

modeseven-lfreleng-actions/helm-chart-publish-action

Publishes Helm Charts to an OCI container registry

5/10
Maintained action available
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/marocchino-sticky-pull-request-comment-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/marocchino-sticky-pull-request-comment-action

Mirror from https://github.com/marocchino/sticky-pull-request-comment

1/10
Maintained action available
k-phoen/semver-release-action

k-phoen/semver-release-action

GitHub Action to automatically create SemVer compliant releases based on PR labels.

3/10
step-security/action-get-latest-tag

step-security/action-get-latest-tag

โœจ GitHub Action to get a latest Git tag. Secure drop-in replacement for actions-ecosystem/action-get-latest-tag.

10/10
Maintained by StepSecurity
launchdarkly/php-server-sdk-consul/.github/actions/publish-docs

launchdarkly/php-server-sdk-consul/.github/actions/publish-docs

Consul integration for the LaunchDarkly SDK for Server-side PHP

5/10
step-security/setup-xcode/__builder_checkout_dir__/.github/actions/privacy-check

step-security/setup-xcode/__builder_checkout_dir__/.github/actions/privacy-check

Set up your GitHub Actions workflow with a specific version of Xcode. Secure drop-in replacement for maxim-lobanov/setup-xcode.

8/10
step-integration-tests/auto-pdpr-test-97498-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-97498-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
ansible-community/ansible-lint-action

ansible-community/ansible-lint-action

โ—๏ธReplaced by https://github.com/marketplace/actions/run-ansible-lint

6/10
step-security/set-commit-status-action/__builder_checkout_dir__/.github/actions/privacy-check

step-security/set-commit-status-action/__builder_checkout_dir__/.github/actions/privacy-check

GitHub Action to set commit status. Secure drop-in replacement for myrotvorets/set-commit-status-action.

10/10
launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/update-cabal

launchdarkly/haskell-server-sdk-redis-hedis/.github/actions/update-cabal

Redis integration for the LaunchDarkly SDK for Server-side Haskell using hedis

5/10