StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-integration-tests/auto-pdpr-test-79922-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-79922-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/testcontainers-node/.github/actions/npm-setup

yonasbsd/testcontainers-node/.github/actions/npm-setup

Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

3/10
Maintained action available
graphql-hive/graphql-inspector

graphql-hive/graphql-inspector

๐Ÿ•ต๏ธโ€โ™€๏ธ Validate schema, get schema change notifications, validate operations, find breaking changes, look for similar types, schema coverage

4/10
Maintained action available
sonarsource/sonarqube-mcp-server/.actions/get-build-number

sonarsource/sonarqube-mcp-server/.actions/get-build-number

Official SonarQube MCP Server for code quality and security in AI agents

6/10
caffeelake/authentik/.github/actions/comment-pr-instructions

caffeelake/authentik/.github/actions/comment-pr-instructions

The authentication glue you need.

4/10
Maintained action available
microsoft/typescript-twoslash-repro-action

microsoft/typescript-twoslash-repro-action

A GitHub Action which evaluates twoslash bug reproductions in GitHub Issues

0/10
aptos-labs/setup-buildx-action

aptos-labs/setup-buildx-action

GitHub Action to set up Docker Buildx

3/10
dustin4444/electron/src/electron/.github/actions/install-build-tools

dustin4444/electron/src/electron/.github/actions/install-build-tools

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

5/10
Maintained action available
step-security/mirror-branch

step-security/mirror-branch

Mirror your new main branch to your old master branch (or mirror any branch A to any branch B). Secure drop-in replacement for zofrex/mirror-branch.

10/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-88903-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88903-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
rmacklin/fetch-through-merge-base

rmacklin/fetch-through-merge-base

A GitHub Action for fetching PR commits through the merge-base

3/10
step-integration-tests/auto-pdpr-test-20565-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-20565-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
jgillis/delete-release-assets

jgillis/delete-release-assets

GitHub action for deleting assets from a GitHub release.

2/10
envoyproxy/toolshed/actions/github/artifact/cache/id

envoyproxy/toolshed/actions/github/artifact/cache/id

7/10
step-security/docker-build-push-action/_next/static/chunks/24692-7d12a5de6cc02590.js

step-security/docker-build-push-action/_next/static/chunks/24692-7d12a5de6cc02590.js

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

9/10
anchore/stereoscope/.github/actions/bootstrap

anchore/stereoscope/.github/actions/bootstrap

go library for processing container images and simulating a squash filesystem

7/10
ministryofjustice/hmpps-temporary-accommodation-ui/.github/actions/image

ministryofjustice/hmpps-temporary-accommodation-ui/.github/actions/image

The user interface for the Temporary Accommodation Service

7/10
step-security/action-actionlint/dockerless

step-security/action-actionlint/dockerless

run actionlint with reviewdog. Secure drop-in replacement for reviewdog/action-actionlint.

10/10
Maintained by StepSecurity
step-security/add-pr-comment/_next/static/chunks/40300-e26a046d4034a815.js

step-security/add-pr-comment/_next/static/chunks/40300-e26a046d4034a815.js

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
ministryofjustice/laa-info-and-advice-datastore/.github/actions/deploy

ministryofjustice/laa-info-and-advice-datastore/.github/actions/deploy

Info & Advice Datastore

5/10
Maintained action available