StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/gh-action_cache/credential-setup

sonarsource/gh-action_cache/credential-setup

GitHub action for caching in AWS S3

5/10
sonarsource/gh-action-lt-backlog/fill

sonarsource/gh-action-lt-backlog/fill

Automate GitHub backlog and Kanbans

6/10
kong/kong-operator/.github/actions/kong-license

kong/kong-operator/.github/actions/kong-license

Kubernetes Operator for Kong Gateways

8/10
step-security/secrets-sync-action/__builder_checkout_dir__/.github/actions/fill

step-security/secrets-sync-action/__builder_checkout_dir__/.github/actions/fill

A Github Action that can sync secrets from one repository to many others. Secure drop-in replacement for jpoehnelt/secrets-sync-action.

8/10
robpc/itchio-upload-action

robpc/itchio-upload-action

2/10
nvidia-isaac/nvblox/.github/actions/fill

nvidia-isaac/nvblox/.github/actions/fill

A GPU-accelerated TSDF and ESDF library for robots equipped with RGB-D cameras.

2/10
azohra/shell-linter

azohra/shell-linter

A Github Action for ShellCheck

4/10
kong/slsa-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-go

kong/slsa-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-go

Language-agnostic SLSA provenance generation for Github Actions

3/10
pyupio/safety-action

pyupio/safety-action

Runs the Safety CLI dependency scanner against your project

2/10
ministryofjustice/laa-data-access-api/.github/actions/deploy

ministryofjustice/laa-data-access-api/.github/actions/deploy

8/10
dotnet/docs-tools/.github/actions/azure-oidc-auth

dotnet/docs-tools/.github/actions/azure-oidc-auth

This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.

3/10
Maintained action available
julia-actions/julia-buildpkg

julia-actions/julia-buildpkg

This action builds a Julia package.

6/10
adrise/omnigent/.github/actions/e2e-run

adrise/omnigent/.github/actions/e2e-run

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents โ€” swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

3/10
dustin4444/desktop/.github/actions/fill

dustin4444/desktop/.github/actions/fill

Focus on what matters instead of fighting with Git.

5/10
Maintained action available
snyk/actions/maven-3-jdk-20

snyk/actions/maven-3-jdk-20

A set of GitHub actions for checking your projects for vulnerabilities.

5/10
rutajdash/prettier-cli-action

rutajdash/prettier-cli-action

A GitHub action to run Prettier CLI Checks.

6/10
yuri6037/action-faketty

yuri6037/action-faketty

FakeTTY GitHub Action

3/10
enricomi/publish-unit-test-result-action/misc/action/image

enricomi/publish-unit-test-result-action/misc/action/image

GitHub Action to publish unit test results on GitHub

3/10
Maintained action available
yonasbsd/pest/.github/actions/setup

yonasbsd/pest/.github/actions/setup

The Elegant Parser

5/10
launchdarkly/dotnet-logging-adapter-nlog/.github/actions/image

launchdarkly/dotnet-logging-adapter-nlog/.github/actions/image

Adapter from LaunchDarkly.Logging API to NLog

4/10