Repositories list

• background-action

  Public
  Background commands with log tailing/capture; waits until file/port/socket/http are ready to proceed. Isolates/dedupe errors.

  step-security-maintained-actions

  JavaScript

  •

  Apache License 2.0

  •1•0•1•6•Updated Apr 18, 2025Apr 18, 2025

• jest-coverage-action-demo

  Public
  TypeScript

  •

  MIT License

  •0•0•2•77•Updated Apr 18, 2025Apr 18, 2025

• ghaction-setup-docker

  Public
  GitHub Action to set up (download and install) Docker CE

  step-security-maintained-actions

  TypeScript

  •

  Apache License 2.0

  •1•0•2•11•Updated Apr 18, 2025Apr 18, 2025

• get-cmake

  Public
  Install and Cache latest CMake and Ninja for your workflows on your GitHub

  step-security-maintained-actions

  0•0•0•0•Updated Apr 18, 2025Apr 18, 2025

• action-semantic-demo

  Public
  TypeScript

  •

  Apache License 2.0

  •0•0•1•31•Updated Apr 18, 2025Apr 18, 2025

• reusable-workflows

  Public
  StepSecurity Reusable Workflows

  MIT License

  •3•0•0•6•Updated Apr 18, 2025Apr 18, 2025

• workflow-conclusion-action

  Public
  GitHub action to get workflow conclusion.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•2•1•11•Updated Apr 18, 2025Apr 18, 2025

• assign-author

  Public
  GitHub Actions to assign author to issue or PR

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•10•Updated Apr 18, 2025Apr 18, 2025

• vitest-coverage-report-action

  Public
  A GitHub Action to report vitest test coverage results

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•3•8•Updated Apr 18, 2025Apr 18, 2025

• secure-repo

  Public
  Orchestrate GitHub Actions Security

  githubgolangsecurity+ 5workflowactionssecurity-toolsgithub-actionssupply-chain-security

  Go

  •

  GNU Affero General Public License v3.0

  •46•282•69•488•Updated Apr 18, 2025Apr 18, 2025

• ghaction-setup-containerd

  Public
  GitHub Action to set up containerd

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•5•Updated Apr 18, 2025Apr 18, 2025

• harden-runner

  Public
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

  actionshardeningsecurity-hardening+ 6egress-filteringnetwork-securityrunnersruntime-securitygithub-actionssupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •69•804•20•15•Updated Apr 17, 2025Apr 17, 2025

• wait-for-secrets

  Public
  Publish from GitHub Actions using multi-factor authentication

  securityactionsaction+ 2mfagithub-actions

  TypeScript

  •

  Apache License 2.0

  •20•284•3•17•Updated Apr 17, 2025Apr 17, 2025

• ultralytics-clone

  Public
  ultralytics-clone for analyzing Ultralytics GitHub Actions exploit with Harden-Runner

  Python

  •

  GNU Affero General Public License v3.0

  •4•1•2•6•Updated Apr 17, 2025Apr 17, 2025

• skip-duplicate-actions

  Public
  Save time and cost when using GitHub Actions

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •3•4•3•12•Updated Apr 17, 2025Apr 17, 2025

• rust-cache

  Public
  A GitHub Action that implements smart caching for rust/cargo projects

  step-security-maintained-actions

  TypeScript

  •

  GNU Lesser General Public License v3.0

  •1•0•3•15•Updated Apr 17, 2025Apr 17, 2025

• test-reporter

  Public
  Displays test results from popular testing frameworks directly in GitHub

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•19•Updated Apr 17, 2025Apr 17, 2025

• workflow-playground-2

  Public
  1•0•5•3•Updated Apr 17, 2025Apr 17, 2025

• google-github-auth

  Public
  A GitHub Action for authenticating to Google Cloud.

  step-security-maintained-actions

  TypeScript

  •

  Apache License 2.0

  •1•0•4•6•Updated Apr 17, 2025Apr 17, 2025

• os

  Public
  Main package repository for production Wolfi images

  C

  •

  Other

  •326•0•0•4•Updated Apr 17, 2025Apr 17, 2025

• agent

  Public
  Purpose-built security agent for hosted runners

  github-actionssecurity

  Go

  •

  Apache License 2.0

  •22•34•21•19•Updated Apr 17, 2025Apr 17, 2025

• ai-codewise-demo

  Public
  Demo repository to try out StepSecurity AI-CodeWise

  Apache License 2.0

  •10•1•0•16•Updated Apr 17, 2025Apr 17, 2025

• xz-clone

  Public
  Analysis of the Backdoored XZ Utils Build Process with Harden-Runner

  C

  •

  Other

  •2•0•0•2•Updated Apr 17, 2025Apr 17, 2025

• actions

  Public
  A collection of reusable Github Actions workflows.

  Apache License 2.0

  •62•0•0•3•Updated Apr 17, 2025Apr 17, 2025

• publish-unit-test-result-action

  Public
  GitHub Action to publish unit test results on GitHub

  step-security-maintained-actions

  Python

  •

  Apache License 2.0

  •4•0•10•21•Updated Apr 16, 2025Apr 16, 2025

• mongodb-github-action

  Public
  Use MongoDB in GitHub Actions

  step-security-maintained-actions

  Shell

  •

  MIT License

  •1•0•3•8•Updated Apr 16, 2025Apr 16, 2025

• action-setup

  Public
  Install pnpm package manager

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•13•Updated Apr 16, 2025Apr 16, 2025

• increment

  Public
  Action to increment a repository variable.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•0•3•8•Updated Apr 16, 2025Apr 16, 2025

• setup-gh-cli-action

  Public
  A GitHub action that installs or updates the gh CLI

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•10•14•Updated Apr 16, 2025Apr 16, 2025

• action-semantic-pull-request

  Public
  GitHub Action that ensures that your PR title matches the Conventional Commits spec

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •4•1•3•11•Updated Apr 16, 2025Apr 16, 2025