StepSecurity Logo
StepSecurity
LoginStart free
actions/create-github-app-token

actions/create-github-app-token

GitHub Action for creating a GitHub App Installation Access Token

GitHubGitHub Repository

865 stars

Node.js

Node Action

Score updated 4 days ago

GitHub Actions security score

actions/create-github-app-token

Score

8/10

License

MIT License

Maintained

12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

11 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 18640 open-source projects

Security Policy

security policy file detected

Networking Behavior of actions/create-github-app-token

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub
6d63fbac34f30fbde4e3420ca14565c0.r2.cloudflarestorage.comUnknown
global.endpoint.security.microsoft.comMicrosoftMicrosoft
cachix.orgUnknown
calendars.icloud.comUnknown
xp.apple.comUnknown
gdmf.apple.comUnknown
ocsp2.apple.comUnknown
prod.app-api.stepsecurity.ioUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
swdist.apple.comUnknown
xp.v.aaplimg.comUnknown
lcdn-locator.apple.comUnknown
configuration.apple.comUnknown
swscan.apple.comUnknown
init.itunes.apple.comUnknown
cf.iadsdk.apple.comUnknown
mask.icloud.comUnknown
mask-api.icloud.comUnknown
apps.mzstatic.comUnknown
pancake.apple.comUnknown
mesu.apple.comUnknown
gateway.icloud.comUnknown
ocsp.apple.comUnknown
device-config.pcms.apple.comUnknown
bag.itunes.apple.comUnknown
itunes.apple.comUnknown
publicassets.cdn-apple.comUnknown
metrics.icloud.comUnknown
ipcdn.apple.comUnknown
gdmf-ados.apple.comUnknown
dns.msftncsi.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
ipcdn-web.apple.comUnknown
ecs.office.comUnknown
stocks-data-service.apple.comUnknown
cafe.github.comGitHubGitHub
updates.cdn-apple.comUnknown
swdist.g.aaplimg.comUnknown
configuration.ls.apple.comUnknown
is2-ssl.mzstatic.comUnknown
is3-ssl.mzstatic.comUnknown
is4-ssl.mzstatic.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
0.pool.ntp.orgUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
raw.githubusercontent.comGitHubGitHub
configuration.apple.com.edgekey.netUnknown
swallow.apple.comUnknown
api.apple-cloudkit.comUnknown
ml.cdn-apple.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
oneocsp.microsoft.comMicrosoftMicrosoft
cdn-h3.g.aaplimg.comUnknown
updates-http.cdn-apple.comUnknown
client.wns.windows.comUnknown
registry.npmjs.orgnpm Registrynpm Registry
swscan-cdn.apple.com.akadns.netUnknown
configuration.g.aaplimg.comUnknown
ocsp.digicert.comUnknown