StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

chainguard-actions/cloudflare-wrangler-action

chainguard-actions/cloudflare-wrangler-action

2/10
sonarsource/sonar-scanner-java-library/.actions/get-build-number

sonarsource/sonar-scanner-java-library/.actions/get-build-number

Common Java library used by many SonarScanners

7/10
step-integration-tests/auto-pdpr-test-34006-9/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-34006-9/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
deepcode-ai/cal.com/.github/actions/cache-build

deepcode-ai/cal.com/.github/actions/cache-build

Scheduling infrastructure for absolutely everyone.

2/10
tcort/markdown-link-check

tcort/markdown-link-check

checks all of the hyperlinks in a markdown text to determine if they are alive or dead

3/10
Maintained action available
grafana/tempo/actions/metrics-collector

grafana/tempo/actions/metrics-collector

Grafana Tempo is a high volume, minimal dependency distributed tracing backend.

7/10
step-security/actions-gh-pages/__builder_checkout_dir__/.github/actions/public-layout.tsx

step-security/actions-gh-pages/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub Actions for GitHub Pages ๐Ÿš€ Deploy static files and publish your site easily. Static-Site-Generators-friendly. Secure drop-in replacement for peaceiris/actions-gh-pages.

10/10
fernandrone/linelint

fernandrone/linelint

Linter that validates simple newline and whitespace rules in all sorts of files.

3/10
rudderlabs/rudder-sdk-kotlin/.github/actions/test-check

rudderlabs/rudder-sdk-kotlin/.github/actions/test-check

Kotlin Android SDK and Kotlin JVM for RudderStack - the Customer Data Platform for Developers.

6/10
cijothomas/weaver/.github/actions/weaver-live-check-start

cijothomas/weaver/.github/actions/weaver-live-check-start

OTel Weaver lets you easily develop, validate, document, and deploy semantic conventions

3/10
codeant-ai/codeant-coverage-action

codeant-ai/codeant-coverage-action

4/10
w9jds/setup-firebase

w9jds/setup-firebase

Firebase GitHub Action (replacement for firebase-action)

2/10
reality2byte/action/autobuild

reality2byte/action/autobuild

7/10
passeidireto/deregister-aws-amis-action

passeidireto/deregister-aws-amis-action

GitHub Action that deregisters AMIs older than a custom age that matches a given name filter

0/10
honeycombio/gha-buildevents

honeycombio/gha-buildevents

Trace GitHub Action workflows with Honeycomb

5/10
chainguard-actions/actions-setup-dotnet

chainguard-actions/actions-setup-dotnet

2/10
slsa-framework/slsa-github-generator

slsa-framework/slsa-github-generator

Language-agnostic SLSA provenance generation for Github Actions

6/10
shopware/github-actions/image

shopware/github-actions/image

Reuseable GitHub Actions Workflows

4/10
Maintained action available
ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/setup-kubectl

ministryofjustice/hmpps-github-shared-actions/.github/actions/tool-installers/setup-kubectl

Shared actions for Github workflows to use - PUT NO WORKFLOWS IN HERE! (bootstrapped 2026-03-30)

8/10
test-summary/action

test-summary/action

Show a helpful summary of test results in GitHub Actions CI/CD workflow runs

4/10