StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

suzuki-shunsuke/tfaction

suzuki-shunsuke/tfaction

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

5/10
Maintained action available
hoprnet/hopr-workflows/actions/nix-action

hoprnet/hopr-workflows/actions/nix-action

GitHub workflows helping HOPR automate tasks via actions

6/10
launchdarkly/openfeature-ruby-server/.github/actions/publish-docs

launchdarkly/openfeature-ruby-server/.github/actions/publish-docs

An OpenFeature provider for the LaunchDarkly Ruby server SDK.

5/10
Maintained action available
yru-weighed/upload-artifact

yru-weighed/upload-artifact

2/10
step-security/pull-request-comment-branch/__builder_checkout_dir__/.github/actions/privacy-check

step-security/pull-request-comment-branch/__builder_checkout_dir__/.github/actions/privacy-check

A GitHub Action to get the head ref and sha of a pull request comment. Secure drop-in replacement for xt0rted/pull-request-comment-branch.

9/10
octopusdeploy/login

octopusdeploy/login

GitHub action to login to your Octopus Server

7/10
olivernybroe/action-conflict-finder

olivernybroe/action-conflict-finder

A Github action for finding merge conflicts

3/10
prichey/retry

prichey/retry

Retries a GitHub Action step on failure or timeout

2/10
jwalton/gh-docker-logs

jwalton/gh-docker-logs

GitHub Action to collect logs from all docker containers.

1/10
joerick/update-vx.y-tag-action

joerick/update-vx.y-tag-action

2/10
harden-runner-canary/kyverno/.github/actions/is-defined

harden-runner-canary/kyverno/.github/actions/is-defined

Kubernetes Native Policy Management

3/10
heisenberg-2077/use-npm-token-action

heisenberg-2077/use-npm-token-action

Use an NPM token within an .npmrc file inside GitHub actions. Scoped packages are the primary use case.

2/10
ionbazan/composer-diff-action

ionbazan/composer-diff-action

Compare composer.lock files and generate human-readable list of package changes

3/10
maximhq/snyk-actions/setup

maximhq/snyk-actions/setup

A set of GitHub actions for checking your projects for vulnerabilities.

3/10
mauriciomenon/ssa_consulta_rapida/.github/actions/opencode-github

mauriciomenon/ssa_consulta_rapida/.github/actions/opencode-github

Ferramenta para consulta e extraรงรฃo de dados de relatรณrios de SSAs.

5/10
Maintained action available
step-security/super-linter

step-security/super-linter

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

10/10
Maintained by StepSecurity
nvidia-nemo/nemo-platform/.github/actions/free-disk-space

nvidia-nemo/nemo-platform/.github/actions/free-disk-space

Make the agents you ship faster, more accurate, and safer.

5/10
tjenkinson/gh-action-auto-merge-dependency-updates

tjenkinson/gh-action-auto-merge-dependency-updates

A GitHub action that will automatically approve and merge a PR that only contains dependency updates, based on some rules. Also possible to disable the merge and use the `success` output to use in combination with other actions.

2/10
jtcombs95-commits/blockscout-rs/.github/actions/setup

jtcombs95-commits/blockscout-rs/.github/actions/setup

smart-contract-verifier-http

3/10
devantler-tech/ksail/.github/actions/ksail-system-test

devantler-tech/ksail/.github/actions/ksail-system-test

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available