StepSecurity Logo
LoginStart free
actions/setup-node

actions/setup-node

Set up your GitHub Actions workflow with a specific version of node.js

GitHubGithub Repository

4131 stars

Node.js

Node Action

Updated 7 days ago

GitHub Actions security score

actions/setup-node

Score

7/10

License

MIT License

Maintained

14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

6 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 97984 open-source projects

Security Policy

security policy file detected

Networking Behavior of actions/setup-node

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub
nodejs.orgUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
registry.npmjs.orgnpm Registrynpm Registry
registry.yarnpkg.comUnknown
Unknown
raw.githubusercontent.comGitHubGitHub
crates.ioUnknown
repo.yarnpkg.comUnknown
cdn.fwupd.orgUnknown
am6.bootstrap.libp2p.ioUnknown
ipfs-7033p.settlemint.comUnknown
dc.services.visualstudio.comUnknown
md-hdd-hpbknnpnc52n.z21.blob.storage.azure.netUnknown
ipfs-swarm.greyh.atUnknown
ipfs.l0l.zipUnknown
bolero-ipfs-replica-410ap.settlemint.comUnknown
rubygems.orgRubyGemsRubyGems
p2p.gke-middleeast.settlemint.comUnknown
ipfs-ws.neaweb.chUnknown
bark.unix.dogUnknown
d-gj2h7tnxlh.execute-api.us-west-2.amazonaws.comUnknown
glb-db52c2cf8be544.github.comGitHubGitHub
md-hdd-fplfb3svq2td.z11.blob.storage.azure.netUnknown