StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

infraway/delete-workflow-runs

infraway/delete-workflow-runs

An action to delete workflow runs in a repository.

3/10
pytorch/pytorch.github.io/test-infra/.github/actions/image

pytorch/pytorch.github.io/test-infra/.github/actions/image

The website for PyTorch

4/10
Maintained action available
mic92/hestia

mic92/hestia

Nix binary cache and build matrix for GitHub Actions: eval once, build checks in parallel jobs, deduplicated uploads, automatic GC, zero setup

4/10
Maintained action available
mdjahid11978-design/clawback/.github/actions/ensure-base-commit

mdjahid11978-design/clawback/.github/actions/ensure-base-commit

OpenClaw fork with Signal fixes + cherry-picked upstream improvements. Narf!

3/10
nvidia/nemoclaw/workflow-actions/.github/actions/install-apt-packages

nvidia/nemoclaw/workflow-actions/.github/actions/install-apt-packages

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
ilteoood/docker_buildx

ilteoood/docker_buildx

GitHub actions with docker buildx

2/10
Maintained action available
wechuli/allcheckspassed

wechuli/allcheckspassed

GitHub Action to confirm that all checks reported on a commit have passed

7/10
maximhq/bullfrog-action

maximhq/bullfrog-action

Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows

4/10
edera-dev/actions/fill

edera-dev/actions/fill

Shared GitHub Actions Repo

4/10
Maintained action available
ministryofjustice/payforlegalaid-tests/.github/snyk-scan

ministryofjustice/payforlegalaid-tests/.github/snyk-scan

8/10
yykamei/block-merge-based-on-time

yykamei/block-merge-based-on-time

A GitHub Action to block merge based on time

5/10
Maintained action available
nvidia-nemo/evaluator/.github/actions/test-template

nvidia-nemo/evaluator/.github/actions/test-template

Open-source library for scalable, reproducible evaluation of AI models and benchmarks.

7/10
dustin4444/git-scm.com/.github/actions/deploy-to-github-pages

dustin4444/git-scm.com/.github/actions/deploy-to-github-pages

The git-scm.com website. Note that this repository is only for the website; issues with git itself should go to https://git-scm.com/community.

5/10
Maintained action available
astral-sh/uv

astral-sh/uv

An extremely fast Python package and project manager, written in Rust.

8/10
grafana/github-api-commit-action

grafana/github-api-commit-action

Commits changes to the repository through the Github api instead of traditional git commands.

6/10
papermc/update-projects-action

papermc/update-projects-action

3/10
weseek/ghaction-release-slack-notification

weseek/ghaction-release-slack-notification

2/10
cap-js/.github/.github/actions/hana-hdi-container

cap-js/.github/.github/actions/hana-hdi-container

Default community health files for the CAP-js organization

5/10
bytemare/actions/init-go

bytemare/actions/init-go

A collection of hardened reusable Github Actions and Workflows.

7/10
sonarsource/ci-github-actions/code-signing

sonarsource/ci-github-actions/code-signing

CI/CD GitHub Actions

6/10