StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

sonarsource/sonarqube-mcp-server-zed/.github/actions/slack-notify

sonarsource/sonarqube-mcp-server-zed/.github/actions/slack-notify

A SonarQube MCP Server extension for Zed

4/10
step-security/semver-data-action

step-security/semver-data-action

GitHub Action that can validate and parse data from SemVer version numbers. Secure drop-in replacement for peter-murray/semver-data-action.

8/10
Maintained by StepSecurity
step-integration-tests/auto-pdpr-test-25038-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-25038-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
step-integration-tests/auto-pdpr-test-20565-2/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-20565-2/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
lgtm-hq/lgtm-ci/.github/actions/upload-pypi-oidc

lgtm-hq/lgtm-ci/.github/actions/upload-pypi-oidc

Reusable CI/CD components: composite actions, workflows, and shell libraries for GitHub Actions

7/10
step-security/release-drafter/null

step-security/release-drafter/null

Drafts your next release notes as pull requests are merged into master. Secure drop-in replacement for release-drafter/release-drafter.

10/10
sasobadovinac/occt/.github/actions/clang-format-check

sasobadovinac/occt/.github/actions/clang-format-check

Open CASCADE Technology (OCCT) is an open-source software development platform for 3D CAD, CAM, CAE. This is a clone of the official repository located on https://dev.opencascade.org/. Please use official development portal for registering issues and providing patches.

5/10
Maintained action available
useblacksmith/build-push-action

useblacksmith/build-push-action

GitHub Action to build and push Docker images with Buildx

5/10
yonasbsd/rocksdb/.github/actions/windows-build-steps

yonasbsd/rocksdb/.github/actions/windows-build-steps

A library that provides an embeddable, persistent key-value store for fast storage.

5/10
Maintained action available
adrise/connectedhomeip/.github/actions/checkout-submodules-and-bootstrap

adrise/connectedhomeip/.github/actions/checkout-submodules-and-bootstrap

Fork of project-chip/connectedhomeip

3/10
lfreleng-actions/path-check-action

lfreleng-actions/path-check-action

Check if a given path exists in the repository, reports type

6/10
ministryofjustice/devsecops-actions/sca/fill

ministryofjustice/devsecops-actions/sca/fill

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

6/10
hyperledger-tooling/github-contributors-action

hyperledger-tooling/github-contributors-action

GitHub action to fetch contributors

4/10
grafana/agent/actions/image

grafana/agent/actions/image

Vendor-neutral programmable observability pipelines.

5/10
goccy/tobari-action/public-layout.tsx

goccy/tobari-action/public-layout.tsx

GitHub Actions for Tobari

4/10
nvidia/cuequivariance/.github/actions/setup-python-uv

nvidia/cuequivariance/.github/actions/setup-python-uv

cuEquivariance is a math library that is a collective of low-level primitives and tensor ops to accelerate widely-used models, like DiffDock, MACE, Allegro and NEQUIP, based on equivariant neural networks. Also includes kernels for accelerated structure prediction.

3/10
Maintained action available
ai-dynamo/dynamo/.github/actions/install-vcluster-cli

ai-dynamo/dynamo/.github/actions/install-vcluster-cli

A Datacenter Scale Distributed Inference Serving Framework

4/10
Maintained action available
nvidia-nemo/lens/ci-templates/.github/actions/check-nvidia-sso

nvidia-nemo/lens/ci-templates/.github/actions/check-nvidia-sso

8/10
chainguard-actions/actions-create-github-app-token

chainguard-actions/actions-create-github-app-token

3/10
Maintained action available
step-security/jest-coverage-action-demo/composite

step-security/jest-coverage-action-demo/composite

9/10