StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/sonar-scala/.github/actions/orchestrator-cache

sonarsource/sonar-scala/.github/actions/orchestrator-cache

Scala analyzer

5/10
Maintained action available
unicornglobal/has-changes-action

unicornglobal/has-changes-action

GitHub action to check for uncommitted code changes

3/10
nodoubtz-record-label/terraform/.github/actions/equivalence-test

nodoubtz-record-label/terraform/.github/actions/equivalence-test

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

2/10
tempoxyz/gh-actions/vendor/dtolnay/public-layout.tsx

tempoxyz/gh-actions/vendor/dtolnay/public-layout.tsx

Reusable GitHub Actions for Tempo

4/10
Maintained action available
stacklet/cube/actions/author-detector

stacklet/cube/actions/author-detector

๐Ÿ“Š Cube โ€” Universal semantic layer platform for AI, BI, spreadsheets, and embedded analytics

3/10
sailpoint-oss/api-linter/packages/github-spectral-comment

sailpoint-oss/api-linter/packages/github-spectral-comment

Spectral Sailpoint Rulesets and Functions

2/10
Maintained action available
politicalsphere/ci/.github/actions/ps-pr-comment

politicalsphere/ci/.github/actions/ps-pr-comment

CI/CD pipelines and GitHub Actions for Political Sphere

2/10
sandersaarond/shared-workflows/actions/bundle-plugin

sandersaarond/shared-workflows/actions/bundle-plugin

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

2/10
step-integration-tests/auto-pdpr-test-92980-15/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-92980-15/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
yonasbsd/grafana/ephemeral

yonasbsd/grafana/ephemeral

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

3/10
Maintained action available
sonarsource/sonarqube/.actions/get-build-number

sonarsource/sonarqube/.actions/get-build-number

Continuous Inspection

4/10
Maintained action available
kong/toolchain

kong/toolchain

๐Ÿ› ๏ธ GitHub Action for `rustup` commands

3/10
reality2byte/docs/.github/actions/clone-translations

reality2byte/docs/.github/actions/clone-translations

The open-source repo for docs.github.com

2/10
dotnet/docs-tools/cleanrepo/cleanrepo

dotnet/docs-tools/cleanrepo/cleanrepo

This repo contains GitHub Actions and other tools that are designed to be invoked on DocFx repositories.

3/10
Maintained action available
nvidia-nemo/export-deploy/fw-ci-templates/.github/actions/publish-docs

nvidia-nemo/export-deploy/fw-ci-templates/.github/actions/publish-docs

A library for exporting models including NeMo and Hugging Face to optimized inference backends, and deploying them for efficient querying

8/10
broadsage/containers/.github/actions/build-metadata

broadsage/containers/.github/actions/build-metadata

Primary source of truth for the Broadsage Container Images

5/10
schwma/parse-changelog-action

schwma/parse-changelog-action

GitHub action that parses a specific release from a CHANGELOG

3/10
secretonline/minecraft-actions/check-fabric-conflicts

secretonline/minecraft-actions/check-fabric-conflicts

A collection of GitHub actions to aid in mod and modpack development for Minecraft

2/10
Maintained action available
tj-actions/bandit

tj-actions/bandit

:octocat: Github action to run PyCQA's bandit security linter.

4/10
ytanikin/prconventionalcommits

ytanikin/prconventionalcommits

2/10