Repositories list

• setup-qemu-action

  Public
  GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

  step-security-maintained-actions

  TypeScript

  •

  Apache License 2.0

  •1•0•0•10•Updated Jan 22, 2026Jan 22, 2026

• msvc-dev-cmd

  Public
  GitHub Action to setup Developer Command Prompt for Microsoft Visual C++. Secure drop-in replacement for ilammy/msvc-dev-cmd.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•0•0•6•Updated Jan 22, 2026Jan 22, 2026

• action-swiftlint

  Public
  GitHub Action for SwiftLint. Secure drop-in replacement for norio-nomura/action-swiftlint.

  step-security-maintained-actions

  Swift

  •

  MIT License

  •1•0•0•4•Updated Jan 22, 2026Jan 22, 2026

• setup-vals

  Public
  Github Action for installing vals (https://github.com/helmfile/vals). Secure drop-in replacement for jkroepke/setup-vals.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•15•Updated Jan 22, 2026Jan 22, 2026

• quarto-actions

  Public
  Secure drop-in replacement for quarto-dev/quarto-actions.

  step-security-maintained-actions

  PowerShell

  •

  GNU General Public License v2.0

  •1•0•1•6•Updated Jan 22, 2026Jan 22, 2026

• proof-html

  Public
  A GitHub Action to validate HTML, check links, and more ✅. Secure drop-in replacement for anishathalye/proof-html.

  step-security-maintained-actions

  Ruby

  •

  MIT License

  •1•0•1•5•Updated Jan 22, 2026Jan 22, 2026

• ghaction-setup-docker

  Public
  GitHub Action to set up (download and install) Docker CE. Secure drop-in replacement for docker/setup-docker-action.

  step-security-maintained-actions

  TypeScript

  •

  Apache License 2.0

  •1•0•1•14•Updated Jan 22, 2026Jan 22, 2026

• alls-green

  Public
  A check for whether the dependency jobs are all green. Secure drop-in replacement for re-actors/alls-green.

  step-security-maintained-actions

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •1•0•1•4•Updated Jan 22, 2026Jan 22, 2026

• read-yaml

  Public

  step-security/read-yaml’s past year of commit activity
  A GitHub Action to read yaml files. Secure drop-in replacement for jbutcher5/read-yaml.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•8•Updated Jan 22, 2026Jan 22, 2026

• harden-runner

  Public
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

  actionshardeningsecurity-hardening+ 6egress-filteringnetwork-securityrunnersruntime-securitygithub-actionssupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •83•945•21•22•Updated Jan 22, 2026Jan 22, 2026

• get-cmake

  Public
  Install and Cache latest CMake and Ninja for your workflows on your GitHub. Secure drop-in replacement for lukka/get-cmake.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•17•Updated Jan 22, 2026Jan 22, 2026

• create-pull-request

  Public
  A GitHub action to create a pull request for changes to your repository in the actions workspace. Secure drop-in replacement for peter-evans/create-pull-request.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•10•Updated Jan 21, 2026Jan 21, 2026

• helm-gh-pages

  Public
  A GitHub Action for publishing Helm charts to Github Pages. Secure drop-in replacement for stefanprodan/helm-gh-pages.

  step-security-maintained-actions

  Shell

  •

  Apache License 2.0

  •1•0•1•6•Updated Jan 21, 2026Jan 21, 2026

• docker-swiftlint

  Public
  Docker image of SwiftLint on ubuntu

  Dockerfile

  •

  MIT License

  •0•0•0•1•Updated Jan 21, 2026Jan 21, 2026

• dependabot-fetch-metadata

  Public
  Extract information about the dependencies being updated by a Dependabot-generated PR. Secure drop-in replacement for dependabot/fetch-metadata.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•10•Updated Jan 21, 2026Jan 21, 2026

• github-action-aerospike

  Public
  GitHub Action to set up an Aerospike database. Secure drop-in replacement for reugn/github-action-aerospike.

  step-security-maintained-actions

  Shell

  •

  MIT License

  •1•0•1•5•Updated Jan 21, 2026Jan 21, 2026

• gha-repo-manager

  Public
  Manage your Github repo(s) settings and secrets using Github Actions and a yaml file. Secure drop-in replacement for andrewthetechie/gha-repo-manager.

  step-security-maintained-actions

  Python

  •

  MIT License

  •1•0•1•7•Updated Jan 21, 2026Jan 21, 2026

• action-setup

  Public
  Install pnpm package manager. Secure drop-in replacement for pnpm/action-setup.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•13•Updated Jan 21, 2026Jan 21, 2026

• setup-zig

  Public
  Install a Zig compiler for usage in GitHub Actions workflows. Secure drop-in replacement for mlugg/setup-zig.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•1•1•13•Updated Jan 21, 2026Jan 21, 2026

• test-reporting

  Public
  Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for phoenix-actions/test-reporting.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•20•Updated Jan 21, 2026Jan 21, 2026

• rust-cache

  Public
  A GitHub Action that implements smart caching for rust/cargo projects. Secure drop-in replacement for Swatinem/rust-cache.

  step-security-maintained-actions

  TypeScript

  •

  GNU Lesser General Public License v3.0

  •1•0•1•19•Updated Jan 21, 2026Jan 21, 2026

• action-download-artifact

  Public
  ⚙️ A GitHub Action to download an artifact associated with given workflow and commit or other criteria. Secure drop-in replacement for dawidd6/action-download-artifact.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•0•1•6•Updated Jan 21, 2026Jan 21, 2026

• setup-jfrog-cli

  Public
  Set up JFrog CLI in your GitHub Actions workflow. Secure drop-in replacement for jfrog/setup-jfrog-cli.

  step-security-maintained-actions

  TypeScript

  •

  Apache License 2.0

  •1•0•1•11•Updated Jan 21, 2026Jan 21, 2026

• get-user-teams-membership

  Public
  GitHub Action to get a user teams membership in a given organization. Secure drop-in replacement for tspascoal/get-user-teams-membership.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•0•1•9•Updated Jan 21, 2026Jan 21, 2026

• slack-github-action

  Public
  Send data into Slack using this GitHub Action!. Secure drop-in replacement for slackapi/slack-github-action.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•0•1•10•Updated Jan 21, 2026Jan 21, 2026

• publish-crates

  Public
  GitHub action to get easy publishing of Rust crates. Secure drop-in replacement for katyo/publish-crates.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•10•Updated Jan 21, 2026Jan 21, 2026

• file-existence-action

  Public
  📁 GitHub Action to check for file existence. Secure drop-in replacement for andstor/file-existence-action.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•11•Updated Jan 21, 2026Jan 21, 2026

• update-pr-description

  Public
  GitHub Action to update pull request descriptions. Secure drop-in replacement for nefrob/pr-description.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•11•Updated Jan 21, 2026Jan 21, 2026

• auto-assign-issue

  Public
  GitHub Action that auto-assigns issues or PRs to one or more users. Secure drop-in replacement for pozil/auto-assign-issue.

  step-security-maintained-actions

  JavaScript

  •

  MIT License

  •1•0•1•11•Updated Jan 21, 2026Jan 21, 2026

• test-summary-action

  Public
  Show a helpful summary of test results in GitHub Actions CI/CD workflow runs. Secure drop-in replacement for test-summary/action.

  step-security-maintained-actions

  TypeScript

  •

  MIT License

  •1•0•1•12•Updated Jan 21, 2026Jan 21, 2026