StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/sonar-scanner-java-library/.actions/get-build-number

sonarsource/sonar-scanner-java-library/.actions/get-build-number

Common Java library used by many SonarScanners

7/10
deepcode-ai/cal.com/.github/actions/cache-build

deepcode-ai/cal.com/.github/actions/cache-build

Scheduling infrastructure for absolutely everyone.

2/10
tcort/markdown-link-check

tcort/markdown-link-check

checks all of the hyperlinks in a markdown text to determine if they are alive or dead

4/10
Maintained action available
grafana/tempo/actions/metrics-collector

grafana/tempo/actions/metrics-collector

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

7/10
step-security/actions-gh-pages/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/actions-gh-pages/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub Actions for GitHub Pages ๐Ÿš€ Deploy static files and publish your site easily. Static-Site-Generators-friendly. Secure drop-in replacement for peaceiris/actions-gh-pages.

9/10
fernandrone/linelint

fernandrone/linelint

Linter that validates simple newline and whitespace rules in all sorts of files.

3/10
rudderlabs/rudder-sdk-kotlin/.github/actions/test-check

rudderlabs/rudder-sdk-kotlin/.github/actions/test-check

Kotlin Android SDK and Kotlin JVM for RudderStack - the Customer Data Platform for Developers.

4/10
Maintained action available
cijothomas/weaver/.github/actions/weaver-live-check-start

cijothomas/weaver/.github/actions/weaver-live-check-start

OTel Weaver lets you easily develop, validate, document, and deploy semantic conventions

3/10
codeant-ai/codeant-coverage-action

codeant-ai/codeant-coverage-action

5/10
w9jds/setup-firebase

w9jds/setup-firebase

Firebase GitHub Action (replacement for firebase-action)

2/10
reality2byte/action/autobuild

reality2byte/action/autobuild

5/10
Maintained action available
passeidireto/deregister-aws-amis-action

passeidireto/deregister-aws-amis-action

GitHub Action that deregisters AMIs older than a custom age that matches a given name filter

2/10
honeycombio/gha-buildevents

honeycombio/gha-buildevents

Trace GitHub Action workflows with Honeycomb

6/10
slsa-framework/slsa-github-generator

slsa-framework/slsa-github-generator

Language-agnostic SLSA provenance generation for Github Actions

5/10
ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/setup-kubectl

ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/setup-kubectl

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

6/10
test-summary/action

test-summary/action

Show a helpful summary of test results in GitHub Actions CI/CD workflow runs

5/10
Maintained action available
andrew-chen-wang/github-wiki-action

andrew-chen-wang/github-wiki-action

๐Ÿ“– GitHub Action to sync a folder to the GitHub wiki

6/10
frieder/jira-issue-updater

frieder/jira-issue-updater

A Github action to update Jira issues

2/10
ministryofjustice/hmpps-github-actions-runner-security/.github/actions/cloud-platform-auth

ministryofjustice/hmpps-github-actions-runner-security/.github/actions/cloud-platform-auth

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

6/10
yonasbsd/greptimedb/.github/actions/publish-github-release

yonasbsd/greptimedb/.github/actions/publish-github-release

An open-source, cloud-native, distributed time-series database with PromQL/SQL/Python supported.

5/10
Maintained action available