StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/sticky-pull-request-comment/__builder_checkout_dir__/.github/actions/secure-download-artifact

step-security/sticky-pull-request-comment/__builder_checkout_dir__/.github/actions/secure-download-artifact

Create comment on pull request, if exists update that comment. Secure drop-in replacement for marocchino/sticky-pull-request-comment.

10/10
n80fr1n60/secure-checkout

n80fr1n60/secure-checkout

Drop-in replacement for actions/checkout@vX.Y.Z with persist-credentials=false enforced

4/10
kong/developer.konghq.com/.github/reusable-steps/run-site

kong/developer.konghq.com/.github/reusable-steps/run-site

๐Ÿฆ Source code for developer.konghq.com website.

4/10
Maintained action available
lfreleng-actions/maven-make-build-action

lfreleng-actions/maven-make-build-action

Uses a Makefile to build a Maven project

8/10
nodoubtz-record-label/next.js/.github/actions/upload-turboyet-data

nodoubtz-record-label/next.js/.github/actions/upload-turboyet-data

The React Framework

3/10
smartcontractkit/.github/actions/ctf-cleanup

smartcontractkit/.github/actions/ctf-cleanup

reusable GHA workflows and actions

5/10
Maintained action available
slsa-framework/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256

slsa-framework/slsa-github-generator/__builder_checkout_dir__/.github/actions/compute-sha256

Language-agnostic SLSA provenance generation for Github Actions

4/10
adrise/matter-casting/.github/actions/public-layout.tsx

adrise/matter-casting/.github/actions/public-layout.tsx

Matter (formerly Project CHIP) creates more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance.

3/10
manticoresoftware/publish_to_repo

manticoresoftware/publish_to_repo

Action to publish packages to Manticore repo

3/10
release-drafter/release-drafter/docker

release-drafter/release-drafter/docker

Drafts your next release notes as pull requests are merged into master.

4/10
Maintained action available
aerospike/spring-data-aerospike-starters/.github/actions/stage-release-artifacts

aerospike/spring-data-aerospike-starters/.github/actions/stage-release-artifacts

spring-data-aerospike-starters

6/10
sakhnovict/add-reviewers-action

sakhnovict/add-reviewers-action

GitHub Action to add reviewer(s) to a pull request.

2/10
step-security/change-string-case-action/__builder_checkout_dir__/.github/actions/image

step-security/change-string-case-action/__builder_checkout_dir__/.github/actions/image

Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.

10/10
step-integration-tests/auto-pdpr-test-10669-12/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-10669-12/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-security/slsa-github-generator

step-security/slsa-github-generator

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

10/10
redhat-actions/oc-new-app

redhat-actions/oc-new-app

Github Action to deploy and expose an application on Openshift

7/10
tempoxyz/gh-actions/actions/socket-firewall/sts

tempoxyz/gh-actions/actions/socket-firewall/sts

Reusable GitHub Actions for Tempo

4/10
Maintained action available
oasdiff/oasdiff-action/breaking

oasdiff/oasdiff-action/breaking

GitHub Actions that detect breaking changes in your OpenAPI specs and post a review on every pull request

5/10
Maintained action available
jordanconway/package-manager-hardening

jordanconway/package-manager-hardening

A non-exhaustive list of package manager hardening recommendations to help prevent supply chain vulnerability attacks. Includes AGENTS.md files, skills and Github Action to audit and enforce these recommendations.

7/10
garygrossgarten/github-action-scp

garygrossgarten/github-action-scp

โฌ†๏ธ Copy a folder to a remote server using SSH

3/10