StepSecurity Logo
StepSecurity
LoginStart free
actions/setup-dotnet

actions/setup-dotnet

Set up your GitHub Actions workflow with a specific version of the .NET core sdk

GitHubGitHub Repository

1144 stars

Node.js

Node Action

Score updated 6 days ago

GitHub Actions security score

actions/setup-dotnet

Score

6/10

License

MIT License

Maintained

9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7

Vulnerabilities

14 existing vulnerabilities detected

Branch protection

branch protection not enabled on development/release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 33216 open-source projects

Security Policy

security policy file detected

Networking Behavior of actions/setup-dotnet

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
aka.msUnknown
dotnetcli.azureedge.netUnknown
dotnetbuilds.azureedge.netUnknown
dotnetcli.blob.core.windows.netUnknown
www.bing.comUnknown
builds.dotnet.microsoft.comMicrosoftMicrosoft
ci.dot.netUnknown
johnvansickle.comUnknown
global.endpoint.security.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
s.symcb.comUnknown
github.comGitHubGitHub
nuget.sitecore.comUnknown
client.wns.windows.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
dc.services.visualstudio.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
login.live.comUnknown
ocsp.digicert.comUnknown
incoming.telemetry.mozilla.orgUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
mask-api.icloud.comUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
dns.msftncsi.comUnknown
metrics.icloud.comUnknown
ocsp2.apple.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
fe2cr.update.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
swscan.apple.comUnknown
swdist.apple.comUnknown
mesu.apple.comUnknown
gdmf.apple.comUnknown
updates.cdn-apple.comUnknown
apple-relay.cloudflare.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
configuration.ls.apple.comUnknown
swallow.apple.comUnknown
ocsp.sectigo.comUnknown
gateway.icloud.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
fbs.smoot.apple.comUnknown
ecs.office.comUnknown
slscr.update.microsoft.comMicrosoftMicrosoft
fe3cr.delivery.mp.microsoft.comMicrosoftMicrosoft
calendars.icloud.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
xp.apple.comUnknown
configuration.apple.comUnknown
init.itunes.apple.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
valid.apple.comUnknown
pancake.apple.comUnknown
news-edge.apple.comUnknown
humb.apple.comUnknown
crl3.digicert.comUnknown
api.apple-cloudkit.comUnknown
bag.itunes.apple.comUnknown
apple-relay.fastly-edge.comUnknown
ipcdn.apple.comUnknown
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
device-config.pcms.apple.comUnknown
ocsp.comodoca.com.cdn.cloudflare.netUnknown
assets-mercury.mzstatic.comUnknown
sf-api-token-service.itunes.apple.comUnknown
c.apple.newsUnknown
stocks-edge.apple.comUnknown
experiments.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
ocsp.usertrust.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
e3528.dscg.akamaiedge.netUnknown
configuration.apple.com.akadns.netUnknown
validation-v2.sls.microsoft.comMicrosoftMicrosoft
cds.apple.comUnknown
adl.windows.comUnknown
help.apple.comUnknown
amp-api.media.apple.comUnknown
0.pool.ntp.orgUnknown
apps.mzstatic.comUnknown
xp.itunes-apple.com.akadns.netUnknown
api.nuget.orgUnknown
cdn.playwright.devUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
api.smoot.apple.comUnknown
ocsp.comodoca.comUnknown
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
mcr.microsoft.comMicrosoftMicrosoft
westcentralus.data.mcr.microsoft.comMicrosoftMicrosoft
eastus.data.mcr.microsoft.comMicrosoftMicrosoft
centralus.data.mcr.microsoft.comMicrosoftMicrosoft
westus.data.mcr.microsoft.comMicrosoftMicrosoft
crl.microsoft.comMicrosoftMicrosoft
nuget.pkg.github.comGitHubGitHub
s.symcd.comUnknown
ts-ocsp.ws.symantec.comUnknown
api.github.comGitHubGitHub