Skip to content
@step-security

StepSecurity

Secure your GitHub Actions with StepSecurity: Your Trusted CI/CD Security Partner
README.md

Step Security Logo

Close the CI/CD Security Gap

Pinned Loading

  1. harden-runner harden-runner Public

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re…

    TypeScript 1.3k 123

  2. dev-machine-guard dev-machine-guard Public

    Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

    Go 196 27

  3. secure-repo secure-repo Public

    Orchestrate GitHub Actions Security

    Go 335 54

  4. github-actions-goat github-actions-goat Public

    GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

    JavaScript 522 348

Repositories

Showing 10 of 659 repositories
  • secure-coding-agents Public
    step-security/secure-coding-agents's past year of commit activity
    0 Apache-2.0 0 0 2 Updated Oct 30, 2026
  • dflook-terraform-validate Public

    GitHub action to validate a terraform configuration. Secure drop-in replacement for dflook/terraform-validate.

    step-security/dflook-terraform-validate's past year of commit activity
    TypeScript 0 MIT 1 0 10 Updated Oct 30, 2026
  • actions-setup-docker Public

    Set up your GitHub Actions workflow with a specific version(18.09,19.03,20.10,nightly) of Docker ON Linux/macOS. Secure drop-in replacement for docker-practice/actions-setup-docker.

    step-security/actions-setup-docker's past year of commit activity
    JavaScript 0 MIT 1 0 9 Updated Oct 30, 2026
  • docker-swiftlint Public

    Docker image of SwiftLint on ubuntu

    step-security/docker-swiftlint's past year of commit activity
    Dockerfile 0 MIT 0 0 1 Updated Oct 30, 2026
  • coding-agent-security Public

    coding-agent-security

    step-security/coding-agent-security's past year of commit activity
    0 Apache-2.0 0 4 4 Updated Oct 30, 2026
  • azure-functions-action Public

    Enable GitHub developers to deploy to Azure Function Apps using GitHub Actions. Secure drop-in replacement for Azure/functions-action.

    step-security/azure-functions-action's past year of commit activity
    TypeScript 0 MIT 1 0 23 Updated Oct 30, 2026
  • trufflehog-action Public

    Find, verify, and analyze leaked credentials. Secure drop-in replacement for trufflesecurity/trufflehog.

    step-security/trufflehog-action's past year of commit activity
    0 AGPL-3.0 1 1 4 Updated Oct 30, 2026
  • ghaction-setup-docker Public

    GitHub Action to set up (download and install) Docker CE. Secure drop-in replacement for docker/setup-docker-action.

    step-security/ghaction-setup-docker's past year of commit activity
    TypeScript 0 Apache-2.0 1 1 12 Updated Oct 30, 2026
  • opencode-action Public

    The open source coding agent. Secure drop-in replacement for anomalyco/opencode.

    step-security/opencode-action's past year of commit activity
    0 MIT 1 1 4 Updated Oct 30, 2026
  • gha-setup-ninja Public

    GitHub Action to install the ninja build tool to PATH. Secure drop-in replacement for seanmiddleditch/gha-setup-ninja.

    step-security/gha-setup-ninja's past year of commit activity
    JavaScript 0 MIT 1 1 10 Updated Oct 30, 2026
View all repositories