StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sd2k/mcp-tokens-action

sd2k/mcp-tokens-action

GitHub Action for checking and comparing token usage of MCP servers

4/10
jsoref/dependency-review-action

jsoref/dependency-review-action

A GitHub Action for detecting vulnerable dependencies in your PRs

3/10
tj-actions/auto-doc

tj-actions/auto-doc

:octocat: Github action that turns your reusable workflows and custom actions into easy to read markdown tables.

4/10
step-security/test-summary-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/test-summary-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Show a helpful summary of test results in GitHub Actions CI/CD workflow runs. Secure drop-in replacement for test-summary/action.

10/10
ministryofjustice/money-to-prisoners-emails/.github/actions/clean-ecr

ministryofjustice/money-to-prisoners-emails/.github/actions/clean-ecr

Application to handle download email attachments and GOV.UK Notify callbacks for Prisoner Money suite of apps

8/10
launchdarkly/go-server-sdk-consul/.github/actions/coverage

launchdarkly/go-server-sdk-consul/.github/actions/coverage

Consul integration for the LaunchDarkly SDK for Server-side Go

6/10
krzema12/github-actions-typing

krzema12/github-actions-typing

Bring type-safety to your GitHub actions' API!

5/10
Maintained action available
aigoncharov/github-upload-release-artifacts-action

aigoncharov/github-upload-release-artifacts-action

Upload artifacts to a GitHub release

3/10
jofthev/workers-sdk/.github/actions/public-layout.tsx

jofthev/workers-sdk/.github/actions/public-layout.tsx

โ›…๏ธ Home to Wrangler, the CLI for Cloudflare Workersยฎ

3/10
step-security/docker-build-push-action/public-layout.tsx

step-security/docker-build-push-action/public-layout.tsx

GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.

10/10
launchdarkly/openfeature-node-server/.github/actions/publish-npm

launchdarkly/openfeature-node-server/.github/actions/publish-npm

An open feature provider for the LaunchDarkly node SDK.

4/10
step-security/powershell/__builder_checkout_dir__/.github/actions/privacy-check

step-security/powershell/__builder_checkout_dir__/.github/actions/privacy-check

GH Action to run Az PowerShell scripts for developers and administrators to develop, deploy, and manage Microsoft Azure applications. Secure drop-in replacement for azure/powershell.

8/10
sozercan/kaito/.github/actions/e2e-base-setup

sozercan/kaito/.github/actions/e2e-base-setup

Kubernetes AI Toolchain Operator

2/10
step-integration-tests/auto-pdpr-test-88903-2/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-88903-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/nix/.github/actions/install-nix-action

yonasbsd/nix/.github/actions/install-nix-action

Nix, the purely functional package manager

5/10
Maintained action available
step-security/setup-licensed/__builder_checkout_dir__/.github/actions/image

step-security/setup-licensed/__builder_checkout_dir__/.github/actions/image

Set up your GitHub Actions workflow with a specific version of licensee/licensed. Secure drop-in replacement for licensee/setup-licensed.

8/10
ledgerhq/ledger-live/tools/actions/composites/run-e2e-playwright-tests

ledgerhq/ledger-live/tools/actions/composites/run-e2e-playwright-tests

Mono-repository for packages related to Ledger Wallet and its JavaScript ecosystem.

4/10
Maintained action available
octokit/graphql-action

octokit/graphql-action

A GitHub Action to send queries to GitHub's GraphQL API

7/10
hyperledger/indy-shared-gha/.github/actions/publish-deb

hyperledger/indy-shared-gha/.github/actions/publish-deb

4/10
cezarypiatek/vsixpublisheraction

cezarypiatek/vsixpublisheraction

GithubAction for publishing extensions to Visual Studio Marketplace

2/10