StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

step-security/super-linter

step-security/super-linter

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10
Maintained by StepSecurity
nvidia-nemo/nemo-platform/.github/actions/free-disk-space

nvidia-nemo/nemo-platform/.github/actions/free-disk-space

Make the agents you ship faster, more accurate, and safer.

5/10
dustin4444/super-linter

dustin4444/super-linter

Combination of multiple linters to run as a GitHub Action or standalone

5/10
Maintained action available
tjenkinson/gh-action-auto-merge-dependency-updates

tjenkinson/gh-action-auto-merge-dependency-updates

A GitHub action that will automatically approve and merge a PR that only contains dependency updates, based on some rules. Also possible to disable the merge and use the `success` output to use in combination with other actions.

2/10
nvidia-nemo/gym/send-slack-alert/.github/actions/send-slack-alert

nvidia-nemo/gym/send-slack-alert/.github/actions/send-slack-alert

Evaluate and improve models and agents using environments

7/10
jtcombs95-commits/blockscout-rs/.github/actions/setup

jtcombs95-commits/blockscout-rs/.github/actions/setup

smart-contract-verifier-http

3/10
chainguard-actions/helm-kind-action

chainguard-actions/helm-kind-action

3/10
Maintained action available
devantler-tech/ksail/.github/actions/ksail-system-test

devantler-tech/ksail/.github/actions/ksail-system-test

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
grafana/sqlds/actions/commands

grafana/sqlds/actions/commands

A package that assists writing SQL-driven datasources

7/10
ministryofjustice/devsecops-actions/sca/codeql

ministryofjustice/devsecops-actions/sca/codeql

A collection of reusable GitHub Actions that standardise DevSecOps security scanning i.e. SCA, SAST, DAST, secrets, IaC, and container security.

6/10
nvidia/aicr/.github/actions/fill

nvidia/aicr/.github/actions/fill

Tooling for optimized, validated, and reproducible GPU-accelerated AI runtime in Kubernetes

6/10
pytorch/torchtitan/test-infra/.github/actions/setup-ssh

pytorch/torchtitan/test-infra/.github/actions/setup-ssh

A PyTorch native platform for training generative AI models

4/10
Maintained action available
open-policy-agent/setup-regal

open-policy-agent/setup-regal

Run Regal, the OPA Rego Linter, as a GitHub Action

3/10
lima-vm/lima-actions/setup

lima-vm/lima-actions/setup

Run non-Ubuntu distributions such as Fedora on GitHub Actions

6/10
step-integration-tests/auto-pdpr-test-71008-10/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-71008-10/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
eclipse-zenoh/ci/bump-crates

eclipse-zenoh/ci/bump-crates

GitHub Actions and workflows used across eclipse-zenoh

4/10
Maintained action available
nikeee/docfx-action

nikeee/docfx-action

A GitHub action to run DocFX and generate a documentation site.

5/10
siemens/ix/.github/workflows/actions/storybook

siemens/ix/.github/workflows/actions/storybook

Siemens Industrial Experience is a design system for designers and developers, to consistently create the perfect digital experience for industrial software products.

6/10
step-security/runs-on-cache/sidebar.tsx

step-security/runs-on-cache/sidebar.tsx

Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.

10/10
heyayushh/setup-anchor

heyayushh/setup-anchor

Optimized GitHub action to install Anchor

3/10