StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

actions-security-demo/grafana/.github/actions/image

actions-security-demo/grafana/.github/actions/image

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10
rstackjs/rspack-toolchain/.rspack-toolchain/public-layout.tsx

rstackjs/rspack-toolchain/.rspack-toolchain/public-layout.tsx

A collection of reusable GitHub Actions for building and distributing Rspack native bindings across multiple platforms.

3/10
09168806659/metaplex-program-library/.github/actions/parse-version-command

09168806659/metaplex-program-library/.github/actions/parse-version-command

Smart contracts maintained by the Metaplex team

2/10
step-security/cargo-install

step-security/cargo-install

Fast `cargo install` action using a GitHub-based binary cache and attestations

7/10
pytorch/torchcodec/test-infra/.github/actions/check-disk-space

pytorch/torchcodec/test-infra/.github/actions/check-disk-space

Media decoding and encoding for PyTorch: videos, images, and audio, on CPU and GPU.

4/10
Maintained action available
caffeelake/voicevox/.github/actions/setup-environment

caffeelake/voicevox/.github/actions/setup-environment

無料で使える中品質なテキスト読み上げソフトウェア、VOICEVOXのエディター

2/10
Maintained action available
equinor/oneseismic-api/.github/actions/image

equinor/oneseismic-api/.github/actions/image

Web API for fast access of arbitrary seismic slices from VDS data

6/10
koistya/linked-pr

koistya/linked-pr

GitHub Actions that finds a pull request (PR) associated with the current commit.

2/10
secureblue/trivalent/__builder_checkout_dir__/.github/actions/compute-sha256

secureblue/trivalent/__builder_checkout_dir__/.github/actions/compute-sha256

A security-focused, Chromium-based browser for desktop Linux inspired by Vanadium.

7/10
reality2byte/docs/.github/actions/precompute-pageinfo

reality2byte/docs/.github/actions/precompute-pageinfo

The open-source repo for docs.github.com

2/10
hyperledger/indy-shared-gha/.github/actions/fill

hyperledger/indy-shared-gha/.github/actions/fill

4/10
dsanders11/project-actions/edit-item

dsanders11/project-actions/edit-item

A collection of actions for automating GitHub projects

5/10
Maintained action available
google-github-actions/run-gemini-cli

google-github-actions/run-gemini-cli

A GitHub Action invoking the Gemini CLI.

5/10
chainguard-actions/actions-cache

chainguard-actions/actions-cache

4/10
Maintained action available
nagyben/cocogitto-action

nagyben/cocogitto-action

A github action to ensure your current gitlog respect the conventional commit specification

2/10
decathlon/release-notes-generator-action

decathlon/release-notes-generator-action

Action to auto generate a release note based on your events

5/10
pytorch/test-infra/.github/actions/setup-uv

pytorch/test-infra/.github/actions/setup-uv

This repository hosts code that supports the testing infrastructure for the PyTorch organization. For example, this repo hosts the logic to track disabled tests and slow tests, as well as our continuation integration jobs HUD/dashboard.

3/10
Maintained action available
posthog/posthog/.github/actions/commit-snapshots

posthog/posthog/.github/actions/commit-snapshots

:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.

4/10
Maintained action available
modelcontextprotocol/actions/cloudflare-pages-preview/cleanup

modelcontextprotocol/actions/cloudflare-pages-preview/cleanup

GitHub Actions relevant to the management of MCP repositories.

5/10
adanedhelwrites/tech-radar/.github/actions/setup-trivy

adanedhelwrites/tech-radar/.github/actions/setup-trivy

Full-stack Turkish tech news aggregator — scrapes 27 sources (cybersecurity, CVE, Kubernetes, SRE, DevTools), translates to Turkish, and serves via a modern dark-mode UI. Built with Django REST Framework, React (Vite), Celery, Redis, and Docker/Kubernetes.

2/10
Maintained action available