Skip to content
@step-security

StepSecurity

Secure your GitHub Actions with StepSecurity: Your Trusted CI/CD Security Partner
README.md

Step Security Logo

Close the CI/CD Security Gap

Pinned Loading

  1. harden-runner harden-runner Public

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re…

    TypeScript 1.3k 113

  2. dev-machine-guard dev-machine-guard Public

    Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

    Go 175 23

  3. secure-repo secure-repo Public

    Orchestrate GitHub Actions Security

    Go 330 54

  4. github-actions-goat github-actions-goat Public

    GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

    JavaScript 519 345

Repositories

Showing 10 of 595 repositories
  • protobuf-ci Public

    A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

    step-security/protobuf-ci's past year of commit activity
    0 Apache-2.0 1 1 4 Updated Sep 10, 2026
  • mozilla-sops-action Public

    GitHub Action for installing Sops. Secure drop-in replacement for mdgreenwald/mozilla-sops-action.

    step-security/mozilla-sops-action's past year of commit activity
    TypeScript 1 MIT 1 1 11 Updated Sep 10, 2026
  • dev-machine-guard Public

    Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

    step-security/dev-machine-guard's past year of commit activity
    Go 175 Apache-2.0 23 16 11 Updated Sep 10, 2026
  • tim-actions-dco Public

    Secure drop-in replacement for tim-actions/dco.

    step-security/tim-actions-dco's past year of commit activity
    0 0 0 1 Updated Sep 9, 2026
  • mimosa Public

    Zero-config docker image promotion. Secure drop-in replacement for hytromo/mimosa.

    step-security/mimosa's past year of commit activity
    0 0 0 1 Updated Sep 9, 2026
  • rust-cache Public

    A GitHub Action that implements smart caching for rust/cargo projects. Secure drop-in replacement for Swatinem/rust-cache.

    step-security/rust-cache's past year of commit activity
    TypeScript 1 LGPL-3.0 1 1 18 Updated Sep 9, 2026
  • cloudposse-github-actions-screenshot Public

    Generate a screenshot from any URL or file://. Secure drop-in replacement for cloudposse-github-actions/screenshot.

    step-security/cloudposse-github-actions-screenshot's past year of commit activity
    JavaScript 0 Apache-2.0 1 0 8 Updated Sep 9, 2026
  • test-reporter Public

    Displays test results from popular testing frameworks directly in GitHub. Secure drop-in replacement for dorny/test-reporter.

    step-security/test-reporter's past year of commit activity
    TypeScript 1 MIT 1 1 26 Updated Sep 9, 2026
  • node-pr-labeler Public

    GitHub Action used by the nodejs/node repository to automatically label pull requests. Secure drop-in replacement for nodejs/node-pr-labeler.

    step-security/node-pr-labeler's past year of commit activity
    JavaScript 0 MIT 1 0 5 Updated Sep 9, 2026
  • gha-setup-ninja Public

    GitHub Action to install the ninja build tool to PATH. Secure drop-in replacement for seanmiddleditch/gha-setup-ninja.

    step-security/gha-setup-ninja's past year of commit activity
    JavaScript 0 MIT 1 0 5 Updated Sep 9, 2026
View all repositories