StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/privacy-check

step-security/actions-rs-toolchain/__builder_checkout_dir__/.github/actions/privacy-check

๐Ÿ› ๏ธ GitHub Action for `rustup` commands. Secure drop-in replacement for actions-rs/toolchain.

9/10
step-security/action-staticcheck/__builder_checkout_dir__/.github/actions/privacy-check

step-security/action-staticcheck/__builder_checkout_dir__/.github/actions/privacy-check

๐Ÿถ Run staticcheck with reviewdog on pull requests to improve code review experience. Secure drop-in replacement for reviewdog/action-staticcheck.

10/10
tempoxyz/gh-actions/vendor/jasonetco/create-an-issue

tempoxyz/gh-actions/vendor/jasonetco/create-an-issue

Reusable GitHub Actions for Tempo

4/10
Maintained action available
ministryofjustice/laa-manage-your-civil-cases/.github/actions/cache-yarn

ministryofjustice/laa-manage-your-civil-cases/.github/actions/cache-yarn

A service to centrally manage civil legal aid cases for the Legal Aid Agency

7/10
mellanox/ovn-kubernetes/.github/actions/diagnostics

mellanox/ovn-kubernetes/.github/actions/diagnostics

A robust Kubernetes networking platform

5/10
Maintained action available
step-integration-tests/auto-pdpr-test-20483-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-20483-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
grafana/sigma-rule-deployment/actions/validate

grafana/sigma-rule-deployment/actions/validate

Automate the conversion and deployment of Sigma Rules to Grafana Alerting via GitHub Actions

8/10
step-integration-tests/auto-pdpr-test-62903-14/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-62903-14/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
launchdarkly/swift-eventsource/.github/actions/test-swiftpm

launchdarkly/swift-eventsource/.github/actions/test-swiftpm

Server-sent events (SSE) client implementation in Swift for iOS, macOS, tvOS, and watchOS

5/10
launchdarkly/go-server-sdk-dynamodb/.github/actions/coverage

launchdarkly/go-server-sdk-dynamodb/.github/actions/coverage

DynamoDB integration for the LaunchDarkly SDK for Server-side Go

5/10
ferretdb/github-actions/image

ferretdb/github-actions/image

Shared GitHub Actions for FerretDB repos

5/10
tomasreyes/bedrock/.github/actions/slack

tomasreyes/bedrock/.github/actions/slack

Making mozilla.org awesome, one pebble at a time

3/10
Maintained action available
step-security/mimosa

step-security/mimosa

Zero-config docker image promotion. Secure drop-in replacement for hytromo/mimosa.

8/10
lfreleng-actions/maven-stage-prep-action

lfreleng-actions/maven-stage-prep-action

Prepare Maven project for staging release โ€” remove SNAPSHOT versions, create git patch/bundle artifacts

8/10
step-integration-tests/auto-pdpr-test-18410-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-18410-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
llvm/actions/setup-windows

llvm/actions/setup-windows

1/10
jason-dour/action-setup-gomplate

jason-dour/action-setup-gomplate

Set up your GitHub Actions workflow with a specific version of Gomplate

2/10
step-security/add-pr-comment

step-security/add-pr-comment

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

10/10
Maintained by StepSecurity
viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/anchore-sbom-action

viasat::Git-Viasat-Com-PoC::seceng-vionix-stepsecurity-poc-test/seceng-devsecops-platform/anchore-sbom-action

forked from https://github.com/anchore/sbom-action

1/10
Maintained action available
openai/codex-security/.github/actions/check-action-candidate

openai/codex-security/.github/actions/check-action-candidate

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

6/10