Skip to content
@step-security

StepSecurity

Secure your GitHub Actions with StepSecurity: Your Trusted CI/CD Security Partner

Step Security Logo

Close the CI/CD Security Gap

Pinned Loading

  1. harden-runner harden-runner Public

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re…

    TypeScript 951 83

  2. secure-repo secure-repo Public

    Orchestrate GitHub Actions Security

    Go 304 51

  3. wait-for-secrets wait-for-secrets Public

    Publish from GitHub Actions using multi-factor authentication

    TypeScript 295 20

  4. github-actions-goat github-actions-goat Public

    GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

    JavaScript 492 304

Repositories

Showing 10 of 221 repositories
  • allure-action Public

    Secure drop-in replacement for allure-framework/allure-action.

    step-security/allure-action’s past year of commit activity
    TypeScript 0 MIT 1 0 9 Updated Jan 29, 2026
  • wait-on-action Public

    A GitHub Action variant of the wait-on package (npmjs.com/package/wait-on). Secure drop-in replacement for iFaxity/wait-on-action.

    step-security/wait-on-action’s past year of commit activity
    0 0 0 1 Updated Jan 29, 2026
  • ghaction-setup-containerd Public

    GitHub Action to set up containerd. Secure drop-in replacement for crazy-max/ghaction-setup-containerd.

    step-security/ghaction-setup-containerd’s past year of commit activity
    TypeScript 0 MIT 1 1 12 Updated Jan 29, 2026
  • hide-comment-action Public

    Action to hide (minimize) comments in pull request. Secure drop-in replacement for int128/hide-comment-action.

    step-security/hide-comment-action’s past year of commit activity
    TypeScript 0 Apache-2.0 1 1 11 Updated Jan 29, 2026
  • dynamodb-actions Public

    Integrate Github Action with Amazon DynamoDB. Secure drop-in replacement for mooyoul/dynamodb-actions.

    step-security/dynamodb-actions’s past year of commit activity
    TypeScript 3 MIT 4 1 15 Updated Jan 29, 2026
  • setup-bun Public

    Set up your GitHub Actions workflow with a specific version of Bun. Secure drop-in replacement for oven-sh/setup-bun.

    step-security/setup-bun’s past year of commit activity
    TypeScript 0 MIT 1 1 13 Updated Jan 29, 2026
  • ghaction-setup-docker Public

    GitHub Action to set up (download and install) Docker CE. Secure drop-in replacement for docker/setup-docker-action.

    step-security/ghaction-setup-docker’s past year of commit activity
    TypeScript 0 Apache-2.0 1 1 14 Updated Jan 29, 2026
  • ssh-key-action Public

    GitHub Action that installs SSH key to .ssh. Secure drop-in replacement for shimataro/ssh-key-action.

    step-security/ssh-key-action’s past year of commit activity
    TypeScript 1 MIT 1 1 12 Updated Jan 29, 2026
  • protobuf-ci Public

    A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

    step-security/protobuf-ci’s past year of commit activity
    0 Apache-2.0 1 1 4 Updated Jan 29, 2026
  • action-send-mail Public

    A GitHub Action to send an email to multiple recipients. Secure drop-in replacement for dawidd6/action-send-mail.

    step-security/action-send-mail’s past year of commit activity
    JavaScript 0 MIT 1 1 13 Updated Jan 29, 2026

Top languages

Loading…

Most used topics

Loading…