Projects in Awesome Lists by step-security
A curated list of projects in awesome lists by step-security .
https://github.com/step-security/harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
actions egress-filtering github-actions hardening network-security runners runtime-security security-hardening supply-chain-security
Last synced: 13 May 2025
https://github.com/step-security/github-actions-goat
GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment
actions attack-simulation attack-simulator devsecops hacking security
Last synced: 15 May 2025
https://github.com/step-security/secure-repo
Orchestrate GitHub Actions Security
actions github github-actions golang security security-tools supply-chain-security workflow
Last synced: 17 Jan 2026
https://github.com/step-security/wait-for-secrets
Publish from GitHub Actions using multi-factor authentication
action actions github-actions mfa security
Last synced: 16 May 2025
https://github.com/step-security/agent
Purpose-built security agent for hosted runners
Last synced: 02 Apr 2026
https://github.com/step-security/ai-codewise
AI-Powered Code Reviews for Best Practices & Security Issues Across Languages
Last synced: 16 Apr 2025
https://github.com/step-security/reproduce-builds
To reproduce builds for artifacts being monitored by Release Monitor
Last synced: 29 Mar 2026
https://github.com/step-security/dynamodb-actions
Integrate Github Action with Amazon DynamoDB. Secure drop-in replacement for mooyoul/dynamodb-actions.
step-security-maintained-actions
Last synced: 13 Apr 2026
https://github.com/step-security/runs-on-cache
Shockingly faster GitHub Action cache with S3 backend. Secure drop-in replacement for runs-on/cache.
step-security-maintained-actions
Last synced: 01 Mar 2026
https://github.com/step-security/workflow-conclusion-action
GitHub action to get workflow conclusion. Secure drop-in replacement for technote-space/workflow-conclusion-action.
step-security-maintained-actions
Last synced: 02 Sep 2025
https://github.com/step-security/ghaction-import-gpg
GitHub Action to import a GPG key. Secure drop-in replacement for crazy-max/ghaction-import-gpg.
step-security-maintained-actions
Last synced: 17 Mar 2026
https://github.com/step-security/pr-labeler-action
Automatically labels your PRs based on branch name patterns like feature/* or fix/*
step-security-maintained-actions
Last synced: 16 Apr 2025
https://github.com/step-security/action-semantic-pull-request
GitHub Action that ensures that your PR title matches the Conventional Commits spec
step-security-maintained-actions
Last synced: 16 Apr 2025
https://github.com/step-security/retry
Retries a GitHub Action step on failure or timeout
step-security-maintained-actions
Last synced: 06 Jul 2025
https://github.com/step-security/ai-codewise-demo
Demo repository to try out StepSecurity AI-CodeWise
Last synced: 29 Mar 2026
https://github.com/step-security/action-actionlint
run actionlint with reviewdog. Secure drop-in replacement for reviewdog/action-actionlint.
step-security-maintained-actions
Last synced: 17 Mar 2026
https://github.com/step-security/setup-zig
Install a Zig compiler for usage in GitHub Actions workflows. Secure drop-in replacement for mlugg/setup-zig.
step-security-maintained-actions
Last synced: 24 Feb 2026
https://github.com/step-security/agent-ebpf
Agent for GitHub Actions runners
Last synced: 25 May 2026
https://github.com/step-security/workflow-dispatch
A GitHub Action for triggering workflows, using the `workflow_dispatch` event
step-security-maintained-actions
Last synced: 05 Sep 2025
https://github.com/step-security/action-markdownlint
Run markdownlint with reviewdog. Secure drop-in replacement for reviewdog/action-markdownlint.
step-security-maintained-actions
Last synced: 02 Apr 2026
https://github.com/step-security/jest-coverage-report-action
Track your code coverage in every pull request.
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/secrets-sync-action
A Github Action that can sync secrets from one repository to many others.
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/rust-cache
A GitHub Action that implements smart caching for rust/cargo projects
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/change-string-case-action
Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.
step-security-maintained-actions
Last synced: 30 Jul 2025
https://github.com/step-security/xz-clone
Analysis of the Backdoored XZ Utils Build Process with Harden-Runner
Last synced: 29 Mar 2026
https://github.com/step-security/helm-gh-pages
A GitHub Action for publishing Helm charts to Github Pages
step-security-maintained-actions
Last synced: 13 Apr 2026
https://github.com/step-security/actions-find-and-replace-string
A GitHub action to execute find-and-replace on strings
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/foundry-toolchain
GitHub action to install Foundry. Secure drop-in replacement for foundry-rs/foundry-toolchain.
step-security-maintained-actions
Last synced: 29 Jan 2026
https://github.com/step-security/create-json
Github Action to create a .json file to use in other steps of the workflow
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/paths-filter
Conditionally run actions based on files modified by PR, feature branch or pushed commits
step-security-maintained-actions
Last synced: 10 Apr 2026
https://github.com/step-security/release-notes-generator-action
Action to auto generate a release note based on your events. Secure drop-in replacement for Decathlon/release-notes-generator-action.
step-security-maintained-actions
Last synced: 15 Apr 2026
https://github.com/step-security/actions-gh-pages
GitHub Actions for GitHub Pages 🚀 Deploy static files and publish your site easily. Static-Site-Generators-friendly. Secure drop-in replacement for peaceiris/actions-gh-pages.
step-security-maintained-actions
Last synced: 05 Feb 2026
https://github.com/step-security/cirruslabs-cache
Cache dependencies and build outputs in GitHub Actions. Secure drop-in replacement for cirruslabs/cache.
step-security-maintained-actions
Last synced: 07 Oct 2025
https://github.com/step-security/action-discord
🚀 GitHub Action that sends a Discord message. . Secure drop-in replacement for Ilshidur/action-discord.
step-security-maintained-actions
Last synced: 19 Jan 2026
https://github.com/step-security/increment
Action to increment a repository variable.
step-security-maintained-actions
Last synced: 24 Oct 2025
https://github.com/step-security/changeset-action
Secure drop-in replacement for changesets/action.
step-security-maintained-actions
Last synced: 21 Apr 2026
https://github.com/step-security/ghcommit-action
GitHub Action to commit files to a git branch using the ghcommit utility. Secure drop-in replacement for planetscale/ghcommit-action.
step-security-maintained-actions
Last synced: 24 Feb 2026
https://github.com/step-security/semver-utils
One-stop shop for working with semantic versions in your GitHub Actions workflows
step-security-maintained-actions
Last synced: 19 Oct 2025
https://github.com/step-security/git-restore-mtime-action
A GitHub Workflow Action which restores timestamps of files in the current tree
step-security-maintained-actions
Last synced: 20 Oct 2025
https://github.com/step-security/nats-action
start nats server(s) for Github Actions
step-security-maintained-actions
Last synced: 23 Oct 2025
https://github.com/step-security/setup-buildx-action
GitHub Action to set up Docker Buildx. Secure drop-in replacement for docker/setup-buildx-action.
step-security-maintained-actions
Last synced: 16 Mar 2026
https://github.com/step-security/reusable-workflows
StepSecurity Reusable Workflows
Last synced: 02 Apr 2026
https://github.com/step-security/feedback
Feedback repository for the Step Security GitHub App
Last synced: 28 Jan 2026
https://github.com/step-security/filter-sarif
GitHub Action for filtering Code Scanning alerts by path and id. Secure drop-in replacement for advanced-security/filter-sarif.
step-security-maintained-actions
Last synced: 15 Apr 2026
https://github.com/step-security/conventional-pr-title-action
Ensure your PR title matches the Conventional Commits spec.
step-security-maintained-actions
Last synced: 09 Feb 2026
https://github.com/step-security/ghaction-setup-docker
GitHub Action to set up (download and install) Docker CE
step-security-maintained-actions
Last synced: 10 Feb 2026
https://github.com/step-security/dynamic-uses
Dynamically resolve and use another GitHub action
Last synced: 19 Mar 2026
https://github.com/step-security/gha-repo-manager
Manage your Github repo(s) settings and secrets using Github Actions and a yaml file. Secure drop-in replacement for andrewthetechie/gha-repo-manager.
step-security-maintained-actions
Last synced: 01 Mar 2026
https://github.com/step-security/install-poetry
Github action for installing and configuring Poetry. Secure drop-in replacement for snok/install-poetry.
step-security-maintained-actions
Last synced: 02 Mar 2026
https://github.com/step-security/google-github-auth
A GitHub Action for authenticating to Google Cloud.
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/npm-get-version-action
This Action scans for a package.json file and reads the version number from that.
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/gh-docker-logs
GitHub Action to collect logs from all docker containers.
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/action-send-mail
A GitHub Action to send an email to multiple recipients
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/publish-unit-test-result-action
GitHub Action to publish unit test results on GitHub
step-security-maintained-actions
Last synced: 24 Apr 2026
https://github.com/step-security/gh-actions-lua
GitHub action for Lua/LuaJIT
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/action-cond
Conditional value for GitHub Action - missing expression for GitHub Actions
step-security-maintained-actions
Last synced: 29 Mar 2026
https://github.com/step-security/setup-nasm
GitHub Action to install NASM. Secure drop-in replacement for ilammy/setup-nasm.
step-security-maintained-actions
Last synced: 01 Apr 2026
https://github.com/step-security/create-issue-from-file
A GitHub action to create an issue using content from a file. Secure drop-in replacement for peter-evans/create-issue-from-file.
step-security-maintained-actions
Last synced: 02 Apr 2026
https://github.com/step-security/auto-approve-action
👍 GitHub Action for automatically approving GitHub pull requests. Secure drop-in replacement for hmarr/auto-approve-action.
step-security-maintained-actions
Last synced: 02 Apr 2026
https://github.com/step-security/setup-licensed
Set up your GitHub Actions workflow with a specific version of licensee/licensed. Secure drop-in replacement for licensee/setup-licensed.
step-security-maintained-actions
Last synced: 30 Apr 2026
https://github.com/step-security/allure-report-action
Allure Report action with history. Secure drop-in replacement for simple-elf/allure-report-action.
step-security-maintained-actions
Last synced: 06 Mar 2026
https://github.com/step-security/action-read-yaml
Custom github action used to read yaml files, supporting multiple keys and variable replacements. Secure drop-in replacement for pietrobolcato/action-read-yaml.
step-security-maintained-actions
Last synced: 14 May 2026
https://github.com/step-security/azure-login
Connect to Azure. Secure drop-in replacement for azure/login.
step-security-maintained-actions
Last synced: 16 May 2026
https://github.com/step-security/ghaction-github-runtime
GitHub Action to expose GitHub runtime to the workflow. Secure drop-in replacement for crazy-max/ghaction-github-runtime.
step-security-maintained-actions
Last synced: 21 Apr 2026
https://github.com/step-security/vitest-coverage-report-action
A GitHub Action to report vitest test coverage results. Secure drop-in replacement for davelosert/vitest-coverage-report-action.
step-security-maintained-actions
Last synced: 25 Jun 2025
https://github.com/step-security/github-tag-action
A Github Action to automatically bump and tag master, on merge, with the latest SemVer formatted version. Works on any platform. Secure drop-in replacement for mathieudutour/github-tag-action.
step-security-maintained-actions
Last synced: 18 Feb 2026
https://github.com/step-security/setup-yq
Sets up YQ, yet-another-markup-language-query-er, for use in your Github Actions workflow
step-security-maintained-actions
Last synced: 22 Jul 2025
https://github.com/step-security/linkinator-action
A GitHub Action that checks your README and other markdown for 404s. Secure drop-in replacement for JustinBeckwith/linkinator-action.
step-security-maintained-actions
Last synced: 23 May 2026
https://github.com/step-security/edit-release
A GitHub Action for editing an existing release. Secure drop-in replacement for irongut/EditRelease.
step-security-maintained-actions
Last synced: 23 May 2026
https://github.com/step-security/skip-duplicate-actions
Save time and cost when using GitHub Actions
Last synced: 09 Nov 2025
https://github.com/step-security/repository-dispatch
A GitHub action to create a repository dispatch event. Secure drop-in replacement for peter-evans/repository-dispatch.
step-security-maintained-actions
Last synced: 13 Jan 2026
https://github.com/step-security/git-tag-action
[GitHub Action] Get ${version} from package.json and git tag ${version} for the repository. Secure drop-in replacement for pkgdeps/git-tag-action.
step-security-maintained-actions
Last synced: 13 Jan 2026
https://github.com/step-security/ansible-galaxy-action
This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.
step-security-maintained-actions
Last synced: 13 Jan 2026
https://github.com/step-security/maven-settings-xml-action
Github Action to create maven settings (~/.m2/settings.xml). Secure drop-in replacement for whelk-io/maven-settings-xml-action.
step-security-maintained-actions
Last synced: 13 Jan 2026
https://github.com/step-security/fetch-gh-release-asset
Github Action to download an asset from a Github release. Secure drop-in replacement for dsaltares/fetch-gh-release-asset.
step-security-maintained-actions
Last synced: 13 Jan 2026