StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

wechuli/allcheckspassed

wechuli/allcheckspassed

GitHub Action to confirm that all checks reported on a commit have passed

7/10
maximhq/bullfrog-action

maximhq/bullfrog-action

Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows

4/10
edera-dev/actions/fill

edera-dev/actions/fill

Shared GitHub Actions Repo

4/10
Maintained action available
ministryofjustice/payforlegalaid-tests/.github/snyk-scan

ministryofjustice/payforlegalaid-tests/.github/snyk-scan

8/10
yykamei/block-merge-based-on-time

yykamei/block-merge-based-on-time

A GitHub Action to block merge based on time

5/10
Maintained action available
nvidia-nemo/evaluator/.github/actions/test-template

nvidia-nemo/evaluator/.github/actions/test-template

Open-source library for scalable, reproducible evaluation of AI models and benchmarks.

7/10
dustin4444/git-scm.com/.github/actions/deploy-to-github-pages

dustin4444/git-scm.com/.github/actions/deploy-to-github-pages

The git-scm.com website. Note that this repository is only for the website; issues with git itself should go to https://git-scm.com/community.

5/10
Maintained action available
astral-sh/uv

astral-sh/uv

An extremely fast Python package and project manager, written in Rust.

8/10
grafana/github-api-commit-action

grafana/github-api-commit-action

Commits changes to the repository through the Github api instead of traditional git commands.

6/10
papermc/update-projects-action

papermc/update-projects-action

3/10
weseek/ghaction-release-slack-notification

weseek/ghaction-release-slack-notification

2/10
cap-js/.github/.github/actions/hana-hdi-container

cap-js/.github/.github/actions/hana-hdi-container

Default community health files for the CAP-js organization

5/10
bytemare/actions/init-go

bytemare/actions/init-go

A collection of hardened reusable Github Actions and Workflows.

7/10
sonarsource/ci-github-actions/code-signing

sonarsource/ci-github-actions/code-signing

CI/CD GitHub Actions

6/10
step-integration-tests/auto-pdpr-test-24888-13/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-24888-13/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/changeset-action/.github/actions/ci-setup

step-security/changeset-action/.github/actions/ci-setup

Secure drop-in replacement for changesets/action.

10/10
step-security/sccache-action

step-security/sccache-action

sccache github action. Secure drop-in replacement for Mozilla-Actions/sccache-action.

9/10
Maintained by StepSecurity
tanker187/pipelines/.github/actions/image

tanker187/pipelines/.github/actions/image

Machine Learning Pipelines for Kubeflow

4/10
centml/dynamo/.github/actions/docker-remote-build

centml/dynamo/.github/actions/docker-remote-build

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
smartcontractkit/.github/actions/ctf-show-grafana-in-test-summary

smartcontractkit/.github/actions/ctf-show-grafana-in-test-summary

reusable GHA workflows and actions

5/10
Maintained action available