StepSecurity Logo
StepSecurity
Community Tier
LoginStart free
actions/cache

actions/cache

Cache dependencies and build outputs in GitHub Actions

GitHubGitHub Repository

5327 stars

Node.js

Node Action

Score updated 32 minutes ago

GitHub Actions security score

actions/cache

Score

7/10

License

MIT License

Maintained

30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

12 existing vulnerabilities detected

Branch protection

branch protection not enabled on development/release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 20080 open-source projects

Security Policy

security policy file detected

Networking Behavior of actions/cache

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
ipfs-4.eri1.filebase.ioUnknown
ipfs-swarm.greyh.atUnknown
moewe.myqnapcloud.comUnknown
ipfs-e7c6p.settlemint.comUnknown
sv16.bootstrap.libp2p.ioUnknown
prtcacprodeus2file7.blob.core.windows.netUnknown
ftpmirror.your.orgUnknown
mirror.umd.eduUnknown
security.ubuntu.comUbuntuUbuntu
repos.eggycrew.comUnknown
ipfs-store-cfc9p.settlemint.comUnknown
git.ioUnknown
pypi.orgPython RegistryPython Registry
files.pythonhosted.orgPython RegistryPython Registry
auth.safetycli.comUnknown
api.github.comGitHubGitHub
cli.codecov.ioCodecovCodecov
keybase.ioUnknown
ingest.codecov.ioCodecovCodecov
o26192.ingest.us.sentry.ioUnknown
codeclimate.comUnknown
d3iz1jjs17r6kg.cloudfront.netUnknown
mirror.gcr.ioUnknown
checkip.amazonaws.comUnknown
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
news.zaproxy.orgUnknown
raw.githubusercontent.comGitHubGitHub
cfu.zaproxy.orgUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
firefox.settings.services.mozilla.comUnknown
r10.o.lencr.orgUnknown
content-signature-2.cdn.mozilla.netUnknown
data.streamlit.ioUnknown
webhooks.fivetran.comUnknown
firefox-settings-attachments.cdn.mozilla.netUnknown
tel.zaproxy.orgUnknown
r11.o.lencr.orgUnknown
global.endpoint.security.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
unitedstates.cp.wd.microsoft.comMicrosoftMicrosoft
storage.googleapis.comGoogleGoogle
check.trivy.devUnknown
fseeazasi4rqdij6hw2harq3.blob.core.windows.netUnknown
sum.golang.orgUnknown
release-assets.githubusercontent.comGitHubGitHub
releases.hashicorp.comHashiCorpHashiCorp
packages.microsoft.comMicrosoftMicrosoft
azure.archive.ubuntu.comUbuntuUbuntu
esm.ubuntu.comUbuntuUbuntu
evbgu32ymljjq7ar3zgaq674.blob.core.windows.netUnknown
repo.maven.apache.orgUnknown
api.sonarcloud.ioSonarSonar
sonarcloud.ioSonarSonar
scanner.sonarcloud.ioSonarSonar
analysis-sensorcache-eu-central-1-prod.s3.eu-central-1.amazonaws.comUnknown
example.comUnknown
capnproto.orgUnknown
static.rust-lang.orgUnknown
proxy.golang.orgGolang ProxyGolang Proxy
registry.npmjs.orgnpm Registrynpm Registry
api.osv.devUnknown
index.crates.ioUnknown
static.crates.ioUnknown
checkstyle.orgUnknown
crates.ioUnknown
packages.nautechsystems.ioUnknown
httpstat.usUnknown
indexer.dydx.tradeUnknown
api.binance.comUnknown
get.helm.shUnknown
us-docker.pkg.devUnknown
nodejs.orgUnknown
get.trivy.devUnknown
public.ecr.awsUnknown
d2glxqk2uabbnd.cloudfront.netUnknown
jxi77vh37xy7ngmxtab4fnpa.blob.core.windows.netUnknown
openaipublic.blob.core.windows.netUnknown
api.openai.comUnknown
indexer.v4testnet.dydx.exchangeUnknown
repo.hex.pmUnknown
builds.hex.pmUnknown
formulae.brew.shUnknown
eu-central-1-1.aws.cloud2.influxdata.comUnknown
coveralls.ioUnknown
hex.pmUnknown
telemetry.vercel.comUnknown
turbo-remote-cache.apps.01.cf.eu01.stackit.cloudUnknown
cdn.playwright.devUnknown
playwright.download.prss.microsoft.comMicrosoftMicrosoft
aus5.mozilla.orgUnknown
badge.fury.ioUnknown
d25lcipzij17d.cloudfront.netUnknown
gruppe.schwarzUnknown
it.schwarzUnknown
vueuse.orgUnknown
router.vuejs.orgUnknown
en.wikipedia.orgUnknown
fontsource.orgUnknown
www.npmjs.comUnknown
www.chartjs.orgUnknown
playground.onyx.schwarzUnknown
storybook.onyx.schwarzUnknown
demo.onyx.schwarzUnknown
vue-blueprint.schwarzUnknown
developer.mozilla.orgUnknown
edge.microsoft.comMicrosoftMicrosoft
copilot.microsoft.comMicrosoftMicrosoft
www.bing.comUnknown
edgeassetservice.azureedge.netUnknown
self.events.data.microsoft.comMicrosoftMicrosoft
cdn.jsdelivr.netUnknown
data.jsdelivr.comUnknown
edge-cloud-resource-static.azureedge.netUnknown
edge-mobile-static.azureedge.netUnknown
pixabay.comUnknown
pexels.comUnknown
unsplash.comUnknown
fonts.google.comUnknown
arc.msn.comUnknown
sass-lang.comUnknown
playwright.devUnknown
vitest.devUnknown
marketplace.visualstudio.comUnknown
eslint.orgUnknown
vuejs.orgUnknown
test-data.nautechsystems.ioUnknown
download.qt.ioUnknown
mirrors.20i.comUnknown
gstreamer.freedesktop.orgUnknown
dl.google.comGoogleGoogle
maven.google.comUnknown
ftp.fau.deUnknown
uploads.github.comGitHubGitHub
firmware.ardupilot.orgUnknown
docs.qgroundcontrol.comUnknown
qgroundcontrol.comUnknown
sources.debian.orgUnknown
api.launchpad.netUnknown
repo.percona.comUnknown
check.percona.comUnknown
qt.mirror.constant.comUnknown
gitlab.comGitLabGitLab
api.replicate.comUnknown
cert.ssl.comUnknown
www.github.comGitHubGitHub
storybook.js.orgUnknown
www.figma.comUnknown
vitepress.devUnknown
www.stackit.deUnknown
nuxt.comUnknown
www.w3.orgUnknown
onyx.schwarzUnknown
gist.github.comGitHubGitHub
melt-ui.comUnknown
i18n.nuxtjs.orgUnknown
content.nuxt.comUnknown
tiptap.devUnknown
tc39.esUnknown
www.typescriptlang.orgUnknown
automationpanda.comUnknown
getbem.comUnknown
pnpm.ioUnknown
code.visualstudio.comUnknown
tsdoc.orgUnknown
tiptap.onyx.schwarzUnknown
client.wns.windows.comUnknown
device-config.pcms.apple.comUnknown
configuration.apple.comUnknown
xp.apple.comUnknown
swscan.apple.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
fs.microsoft.comMicrosoftMicrosoft
gdmf.apple.comUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
metrics.icloud.comUnknown
ocsp2.apple.comUnknown
bag.itunes.apple.comUnknown
dns.msftncsi.comUnknown
configuration.ls.apple.comUnknown
swallow.apple.comUnknown
mesu.apple.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
mask-api.icloud.comUnknown
ocsp.comodoca.com.cdn.cloudflare.netUnknown
ipcdn.apple.comUnknown
cds.apple.comUnknown
ipcdn-lb.apple.com.akadns.netUnknown
sequoia.cdn-apple.comUnknown
help.apple.comUnknown
news-edge.apple.comUnknown
c.apple.newsUnknown
swdist.apple.comUnknown
api.apple-cloudkit.comUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
pancake.apple.comUnknown
fbs.smoot.apple.comUnknown
assets-mercury.mzstatic.comUnknown
incoming.telemetry.mozilla.orgUnknown
ocsp.digicert.comUnknown
ocsp.sectigo.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
tas02.sls.update.microsoft.comMicrosoftMicrosoft
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
au.download.windowsupdate.comUnknown
updates.cdn-apple.comUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
gateway.icloud.comUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
apple-relay.fastly-edge.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
login.live.comUnknown
configuration.apple.com.edgekey.netUnknown
dl.min.ioUnknown
api.mercury.launchableinc.comUnknown
init.itunes.apple.comUnknown
valid.apple.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
telemetry.visualstudio.microsoft.comMicrosoftMicrosoft
calendars.icloud.comUnknown
apple-relay.cloudflare.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
ecs.office.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
amp-api.media.apple.comUnknown
slscr.update.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
xp.itunes-apple.com.akadns.netUnknown
0.pool.ntp.orgUnknown
weather-edge.apple.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
stocks-edge.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
humb.apple.comUnknown
displaycatalog.mp.microsoft.comMicrosoftMicrosoft
tas01.cwsapp.update.microsoft.comMicrosoftMicrosoft
fe3cr.delivery.mp.microsoft.comMicrosoftMicrosoft
dl.delivery.mp.microsoft.comMicrosoftMicrosoft
1d.tlu.dl.delivery.mp.microsoft.comMicrosoftMicrosoft
gateway-oblivious.apple.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
dc.services.visualstudio.comUnknown
registry.yarnpkg.comUnknown
www.googleapis.comGoogleGoogle
dns.googleUnknown
_dns.resolver.arpaUnknown
gsa.apple.comUnknown
adl.windows.comUnknown
licensing.mp.microsoft.comMicrosoftMicrosoft
unlinkability.apple.comUnknown
packagist.orgUnknown
api.anthropic.comUnknown
validation-v2.sls.microsoft.comMicrosoftMicrosoft
init-kt.apple.comUnknown
swdist.apple.com.akadns.netUnknown
time.windows.comUnknown
configuration.apple.com.akadns.netUnknown
ab.apple.com.akadns.netUnknown
ocsp.usertrust.comUnknown
gspe1-ssl.ls.apple.comUnknown
stocks-data-service.apple.comUnknown
cf.iadsdk.apple.comUnknown
ocsp.edge.digicert.comUnknown
api.phpstan.orgUnknown
iadsdk.apple.comUnknown
lcdn-locator.apple.comUnknown
prod.app-api.stepsecurity.ioUnknown
help.origin-apple.com.akadns.netUnknown
blob.bn9prdstrz04a.store.core.windows.netUnknown
releases.astral.shUnknown
xp.v.aaplimg.comUnknown
geover.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
is4-ssl.mzstatic.comUnknown
is2-ssl.mzstatic.comUnknown
swdist.g.aaplimg.comUnknown
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub