StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

launchdarkly/openfeature-dotnet-server/.github/actions/build-docs

launchdarkly/openfeature-dotnet-server/.github/actions/build-docs

An OpenFeature provider for the LaunchDarkly dotnet server SDK.

5/10
Maintained action available
envoyproxy/toolshed/gh-actions/github/checkout

envoyproxy/toolshed/gh-actions/github/checkout

7/10
step-security/tauri-action

step-security/tauri-action

Build your Web application as a Tauri binary for macOS, Linux and Windows. Secure drop-in replacement for tauri-apps/tauri-action.

10/10
Maintained by StepSecurity
useblacksmith/golangci-lint-action

useblacksmith/golangci-lint-action

Official GitHub Action for golangci-lint using the Blacksmith cache

0/10
open-component-model/ocm-setup-action

open-component-model/ocm-setup-action

GitHub Action installing the OCM command-line tool

7/10
yonasbsd/greptimedb/.github/actions/setup-etcd-cluster

yonasbsd/greptimedb/.github/actions/setup-etcd-cluster

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10
Maintained action available
dmnemec/copy_file_to_another_repo_action

dmnemec/copy_file_to_another_repo_action

This GitHub Action copies a file from the current repository to a location in another repository

6/10
nschloe/action-cached-lfs-checkout

nschloe/action-cached-lfs-checkout

GitHub checkout action with LFS files pulled from cache

4/10
gitguardian/ggshield/actions/secret

gitguardian/ggshield/actions/secret

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

8/10
kroxylicious/kroxylicious/.github/actions/common/slack-notification

kroxylicious/kroxylicious/.github/actions/common/slack-notification

Kroxylicious, the snappy open source proxy for Apache Kafkaยฎ

7/10
step-security/split-strings

step-security/split-strings

Github Action for splitting strings into parts by separator with limit. Secure drop-in replacement for xom9ikk/split.

10/10
Maintained by StepSecurity
adrise/matter-casting/.github/actions/dump-disk-info

adrise/matter-casting/.github/actions/dump-disk-info

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10
step-security/add-and-commit/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/add-and-commit/__builder_checkout_dir__/.github/actions/public-layout.tsx

:octocat: Automatically commit changes made in your workflow run directly to your repo. Secure drop-in replacement for EndBug/add-and-commit.

10/10
step-integration-tests/auto-pdpr-test-65906-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-65906-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
quad4-software/meshchatx/.github/actions/setup-node-pnpm

quad4-software/meshchatx/.github/actions/setup-node-pnpm

All-in-one Reticulum client

5/10
Maintained action available
ledgerhq/ledger-live/tools/actions/fill

ledgerhq/ledger-live/tools/actions/fill

Mono-repository for Ledger Wallet apps and related packages

4/10
Maintained action available
sonarsource/sonar-plugin-api/.actions/get-build-number

sonarsource/sonar-plugin-api/.actions/get-build-number

API to develop plugins for SonarQube (Server, Cloud) and SonarQube for IDE

7/10
cenkalti/backoff

cenkalti/backoff

โฑ The exponential backoff algorithm in Go

4/10
jspricke/ros-deb-builder-action

jspricke/ros-deb-builder-action

Github Action to convert ROS packages to Debian packages

3/10
actionshub/terraform-lint

actionshub/terraform-lint

Repository for the terraform-lint Github Action

5/10