Skip to content
@step-security

StepSecurity

Secure your GitHub Actions with StepSecurity: Your Trusted CI/CD Security Partner
README.md

Step Security Logo

Close the CI/CD Security Gap

Pinned Loading

  1. harden-runner harden-runner Public

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re…

    TypeScript 1.3k 116

  2. dev-machine-guard dev-machine-guard Public

    Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

    Go 179 23

  3. secure-repo secure-repo Public

    Orchestrate GitHub Actions Security

    Go 332 54

  4. github-actions-goat github-actions-goat Public

    GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

    JavaScript 519 346

Repositories

Showing 10 of 631 repositories
  • label-sync Public

    :octocat: An action that allows you to sync labels from a repository or a config file. Secure drop-in replacement for EndBug/label-sync.

    step-security/label-sync's past year of commit activity
    TypeScript 0 MIT 1 1 9 Updated Sep 28, 2026
  • fossa-action Public

    Find license compliance and security issues in your applications with FOSSA and GitHub Actions. Secure drop-in replacement for fossas/fossa-action.

    step-security/fossa-action's past year of commit activity
    TypeScript 0 MPL-2.0 1 1 9 Updated Sep 28, 2026
  • gh-action-bump-version Public

    GitHub Action for automated npm version bump. Secure drop-in replacement for phips28/gh-action-bump-version.

    step-security/gh-action-bump-version's past year of commit activity
    JavaScript 0 MIT 1 1 9 Updated Sep 28, 2026
  • pypa-hatch Public

    Modern, extensible Python project management. Secure drop-in replacement for pypa/hatch.

    step-security/pypa-hatch's past year of commit activity
    Shell 0 MIT 1 1 4 Updated Sep 28, 2026
  • the-actions-org-workflow-dispatch Public

    A GitHub Action for triggering workflows, using the `workflow_dispatch` event. Secure drop-in replacement for the-actions-org/workflow-dispatch.

    step-security/the-actions-org-workflow-dispatch's past year of commit activity
    TypeScript 0 MIT 1 1 9 Updated Sep 28, 2026
  • actions-goveralls Public

    Coveralls GitHub Action with Go integration powered by mattn/goveralls. Secure drop-in replacement for shogo82148/actions-goveralls.

    step-security/actions-goveralls's past year of commit activity
    TypeScript 0 MIT 1 1 7 Updated Sep 28, 2026
  • semantic-release-action Public

    GitHub Action for Semantic Release. Secure drop-in replacement for cycjimmy/semantic-release-action.

    step-security/semantic-release-action's past year of commit activity
    JavaScript 0 MIT 1 1 6 Updated Sep 28, 2026
  • chrome-extension-upload Public

    upload & publish extensions to the Chrome Web Store. Secure drop-in replacement for mnao305/chrome-extension-upload.

    step-security/chrome-extension-upload's past year of commit activity
    TypeScript 0 MIT 1 1 9 Updated Sep 28, 2026
  • trx-parser Public

    This repository contains a Typescript GitHub action for parsing trx files and creating status check for each trx file based on its test outcome. Secure drop-in replacement for NasAmin/trx-parser.

    step-security/trx-parser's past year of commit activity
    TypeScript 0 MIT 1 1 12 Updated Sep 28, 2026
  • paths-filter Public

    Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter.

    step-security/paths-filter's past year of commit activity
    TypeScript 5 MIT 5 1 10 Updated Sep 28, 2026
View all repositories