PluginStatsStepSecurity Actions Security installs statistics
By StepSecurity · GitHub Marketplace
Stop CI/CD supply chain attacks
StepSecurity Actions Security has 2,108 recorded installs on GitHub Marketplace.
It ranks #134 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About StepSecurity Actions Security
🛡️ What is StepSecurity?
StepSecurity is a robust security platform specifically designed to enhance the security of GitHub Actions. It safeguards the following layers:
• Action Runners • GitHub Action Workflow Files • Third-party GitHub Actions
GitHub Actions execute untrusted code in a privileged environment. StepSecurity's App is essential for those concerned about:
• Theft of CI/CD credentials, which can compromise your cloud infrastructure. • Tampering of release builds, leading to supply chain attacks. • Risk of 3rd party GitHub Actions, leading to potential security vulnerabilities in your CI/CD pipeline.
🚀 Trusted by Industry Leaders
Harden-Runner, a flagship solution from StepSecurity, safeguards over 5,000 open-source projects and enterprises, including industry giants like Microsoft, Google, and Kubernetes.
🔑 Permission Requirements
StepSecurity App requires minimal permissions to operate securely. It only needs the following read-only permissions on your repositories:
• actions: read • secrets: read • organization_secrets: read
📌 Why These Permissions?
The secrets: read and organization_secrets: read permissions provide access only to metadata about secrets. StepSecurity does not access the actual secret values. These permissions enable the App to:
• Identify secrets that have not been rotated for a long time. • Enhance security insights without compromising sensitive data.
Additionally, as outlined in the official GitHub API documentation, these permissions return only:
• The name of the secret. • When it was created. • When it was last updated.
🔒 Commitment to Security
StepSecurity is built with a security-first mindset, ensuring that it never accesses customer code or secret values. By focusing on metadata insights, it strengthens security without compromising user privacy.
📞 Support
Need help? Our support team is here to assist you with any questions or security concerns.
📧 Email: support@stepsecurity.io
Description from the GitHub Marketplace listing.
- Security
Where StepSecurity Actions Security sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/harden-runner-app. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.