actions/upload-artifact
GitHub Actions security score
| actions/upload-artifact | |
|---|---|
Score | 7/10 |
License | MIT License |
Maintained | 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
Vulnerabilities | 6 existing vulnerabilities detected |
Branch protection | branch protection not enabled on development/release branches |
Manual code review | - |
Secure publishing | - |
Signed commits | - |
Automated security tools | - |
Popular | Used by 27688 open-source projects |
Security Policy | security policy file detected |
Networking Behavior of actions/upload-artifact
This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.
Popular DestinationUnknown Destination
| Network Destination | Owner |
|---|---|
| scans-in.gradle.com | Unknown |
| telemetry.redwoodjs.com | Unknown |
| registry-1.docker.io | |
| auth.docker.io | |
| quark.quantumparticle.io | Unknown |
| cdnjs.cloudflare.com | Unknown |
| fonts.gstatic.com | Unknown |
| api.github.com | |
| fonts.googleapis.com | |
| cdn.jsdelivr.net | Unknown |
| dc.services.visualstudio.com | Unknown |
| github.com | |
| objects.githubusercontent.com | |
| edge.pkg.st | Unknown |
| quay.io | Unknown |
| cdn03.quay.io | Unknown |
| api.codecov.io | |
| storage.googleapis.com | |
| subnet.min.io | Unknown |
| api.linode.com | Unknown |
| epss.cyentia.com | Unknown |
| www.cisa.gov | |
| www.fleetdm.com | Unknown |
| fleetdm.com | Unknown |
| proxy.golang.org | |
| sum.golang.org | Unknown |
| tuf.fleetctl.com | Unknown |
| www.debian.org | Unknown |
| gcr.io | Unknown |
| dl.min.io | Unknown |
| security-metadata.canonical.com | Unknown |
| charts.jetstack.io | Unknown |
| open-policy-agent.github.io | Unknown |
| learn.microsoft.com | |
| production.cloudflare.docker.com | |
| mdmenrollment.apple.com | Unknown |
| region1.v2.argotunnel.com | Unknown |
| pkg-containers.githubusercontent.com | |
| raw.githubusercontent.com | |
| www.redhat.com | Redhat |
| update.traefik.io | Unknown |
| region2.v2.argotunnel.com | Unknown |
| objects-origin.githubusercontent.com | |
| pypi.org | |
| esm.ubuntu.com | |
| formulae.brew.sh | Unknown |
| security.access.redhat.com | Redhat |
| vpp.itunes.apple.com | Unknown |
| repo.maven.apache.org | Unknown |
| packages.microsoft.com | |
| security.ubuntu.com | |
| archive.ubuntu.com | |
| httpstat.us | Unknown |
| deb.debian.org | Unknown |
| jitpack.io | Unknown |
| ratifyacrac47.azurecr.io | Unknown |
| ratify-aks-ratify-e2e-5810-daae1e-nntu4zhj.hcp.westus2.azmk8s.io | Unknown |
| updates.fleetdm.com | Unknown |
| westus2.data.mcr.microsoft.com | |
| eastus.data.mcr.microsoft.com | |
| mcr.microsoft.com | |
| centralus.data.mcr.microsoft.com | |
| registry.npmjs.org | |
| mirrors.almalinux.org | Unknown |
| azure.repo.almalinux.org | Unknown |
| mirrors.rockylinux.org | Unknown |
| us.mirrors.cicku.me | Unknown |
| distro.ibiblio.org | Unknown |
| mirror.chpc.utah.edu | Unknown |
| prod-registry-k8s-io-us-east-1.s3.dualstack.us-east-1.amazonaws.com | Unknown |
| mirrors.rit.edu | Unknown |
| rocky-linux-europe-west3.production.gcp.mirrors.ctrliq.cloud | Unknown |
| ftp.fau.de | Unknown |
| mirrors.xtom.de | Unknown |
| checkpoint.prisma.io | Unknown |
| epss.empiricalsecurity.com | Unknown |
| mirror.cs.vt.edu | Unknown |
| westus2.azure.repo.almalinux.org | Unknown |
| dl.rockylinux.org | Unknown |
| mirror.siena.edu | Unknown |
| cdn01.quay.io | Unknown |
| cli.codecov.io | |
| ingest.codecov.io | |
| o26192.ingest.us.sentry.io | Unknown |
| westeurope.api.playwright.microsoft.com | |
| browser.playwright.microsoft.com | |
| nyc.mirrors.clouvider.net | Unknown |
| rocky-linux-us-east5.production.gcp.mirrors.ctrliq.cloud | Unknown |
| files.pythonhosted.org | |
| telemetry.nextjs.org | Unknown |
| mirror.plusline.net | Unknown |
| mirror.rnet.missouri.edu | Unknown |
| rocky.mirror.shastacoe.net | Unknown |
| clients2.google.com | Unknown |
| safebrowsingohttpgateway.googleapis.com | |
| redirector.gvt1.com | Unknown |
| accounts.google.com | Unknown |
| r3---sn-2imern76.gvt1.com | Unknown |
| clients2.googleusercontent.com | Unknown |
| r5---sn-2imern76.gvt1.com | Unknown |
| optimizationguide-pa.googleapis.com | |
| cdn.playwright.dev | Unknown |
| playwright.download.prss.microsoft.com | |
| mirror.netzwerge.de | Unknown |
| rocky-linux-us-central1.production.gcp.mirrors.ctrliq.cloud | Unknown |
| r3---sn-vgqskn67.gvt1.com | Unknown |
| r3---sn-a5mekn6d.gvt1.com | Unknown |
| r4---sn-a5msenek.gvt1.com | Unknown |
| r5---sn-vgqsrnzk.gvt1.com | Unknown |
| formbricks-cdn.s3.eu-central-1.amazonaws.com | Unknown |
| r1---sn-vgqsrnlk.gvt1.com | Unknown |
| r5---sn-vgqsrn66.gvt1.com | Unknown |
| ftp.halifax.rwth-aachen.de | Unknown |
| r1---sn-n4v7snl7.gvt1.com | Unknown |
| nodejs-dm18a3vpb-openjs.vercel.app | Unknown |
| cdp.customer.io | Unknown |
| r4---sn-o097znsz.gvt1.com | Unknown |
| ftp.agdsn.de | Unknown |
| ports.ubuntu.com | |
| r4---sn-p5qlsn6l.gvt1.com | Unknown |
| mirror.cpsc.ucalgary.ca | Unknown |
| r1---sn-a5mlrnls.gvt1.com | Unknown |
| r1---sn-a5mekn6l.gvt1.com | Unknown |
| mirrors.iu13.net | Unknown |
| r1---sn-2imern76.gvt1.com | Unknown |
| r4---sn-o097znzk.gvt1.com | Unknown |
| r3---sn-o097znzr.gvt1.com | Unknown |
| rocky-linux-us-west4.production.gcp.mirrors.ctrliq.cloud | Unknown |
| rocky-linux-europe-west2.production.gcp.mirrors.ctrliq.cloud | Unknown |
| rockylinux.mirrorservice.org | Unknown |
| rocky-linux-us-south1.production.gcp.mirrors.ctrliq.cloud | Unknown |
| rocky-linux-us-west3.production.gcp.mirrors.ctrliq.cloud | Unknown |
| fleet-test-7b098261-4b96-47c7-932b-a9a2e7f23a33.fleetuem.com | Unknown |
| www.keil.com | Unknown |
| keilpack.azureedge.net | Unknown |
| lcd-15902890282-sanity-test-1-dns-xzwxrj9j.hcp.australiaeast.azmk8s.io | Unknown |
| lcd-15902890282-external-e2e-test-1-dns-sxswaq5p.hcp.australiaeast.azmk8s.io | Unknown |
| ghcr.io | |
| r5---sn-o097znz7.gvt1.com | Unknown |
| sadevicepacksdqaus.blob.core.windows.net | Unknown |
| sadevicepacksprodus.blob.core.windows.net | Unknown |
| index.crates.io | Unknown |
| static.crates.io | Unknown |
| r2---sn-vgqsrnzs.gvt1.com | Unknown |
| fleet-test-6f09b3e3-79f8-46ee-a6b7-835019b2fe68.fleetuem.com | Unknown |
| workers.cloudflare.com | Unknown |
| fleet-test-2e3dabd4-5842-4334-bde3-b57b6f6900f4.fleetuem.com | Unknown |
| ocsp.sectigo.com | Unknown |
| nodejs-qtmozyzmg-openjs.vercel.app | Unknown |
| cloud.orama.run | Unknown |
| fleet-test-81ada2c5-2ce2-49ee-ac48-c3357767399b.fleetuem.com | Unknown |
| winatp-gw-cus.microsoft.com | |
| us-v20.events.data.microsoft.com | |
| example.com | Unknown |
| global.endpoint.security.microsoft.com | |
| mirror.wiseglobalsolutions.com | Unknown |
| dl-cdn.alpinelinux.org | |
| release-assets.githubusercontent.com | |
| x.cp.wd.microsoft.com | |
| fleet-test-78e05723-5268-4457-962d-0f47c66122aa.fleetuem.com | Unknown |
| nodejs-p94nu5okz-openjs.vercel.app | Unknown |
| fleet-test-7babe2a1-cab6-42a8-8981-a15b62930cf1.fleetuem.com | Unknown |
| charts.konghq.com | Unknown |
| prod-registry-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.com | Unknown |
| fleet-test-04616a21-63a2-4a72-bb6d-791e22fc412b.fleetuem.com | Unknown |
| fleet-test-45f180ad-4e11-429b-92a7-297a2a78eb9d.fleetuem.com | Unknown |
| fleet-test-00667557-171d-4b00-a56f-89ced6d46a20.fleetuem.com | Unknown |
| r7k2fydpsuvyoapfik6ypwvs.blob.core.windows.net | Unknown |
| builds.dotnet.microsoft.com | |
| fleet-test-54b4833c-426f-4d9f-974f-f51064401af3.fleetuem.com | Unknown |
| www.google.com | Unknown |
| rocky-linux-europe-west9.production.gcp.mirrors.ctrliq.cloud | Unknown |
| miroir.univ-lorraine.fr | Unknown |
| ambassador-labs.gateway.scarf.sh | Unknown |
| kong-hf.konghq.com | Unknown |
| plug-mirror.rcac.purdue.edu | Unknown |
| app.getambassador.io | Unknown |
| downloads.1password.com | Unknown |
| fleet-test-0319398e-fcd9-4634-8853-05347af48e3e.fleetuem.com | Unknown |
| docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com | |
| wdcp.microsoft.com | |
| go.microsoft.com | |
| definitionupdates.microsoft.com | |
| fleet-test-06a07ac8-b9ba-4635-8da1-5b1e027565b0.fleetuem.com | Unknown |
| unitedstates.x.cp.wd.microsoft.com | |
| archive.debian.org | Unknown |
| rocky.reloumirrors.net | Unknown |
| fleet-test-64e25a98-0b46-4de0-afdd-ad4afc3518c4.fleetuem.com | Unknown |
| build.shibboleth.net | Unknown |
| unitedstates.cp.wd.microsoft.com | |
| maven.pkg.github.com | |
| osm-planet-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com | Unknown |
| fleet-test-41af50fb-211e-4946-9333-60571132356b.fleetuem.com | Unknown |
| fleet-test-f3fef566-bacd-4836-8441-af22f649cfd9.fleetuem.com | Unknown |
| r1---sn-p5qlsnrl.gvt1.com | Unknown |
| r3---sn-p5qlsn76.gvt1.com | Unknown |
| fleet-test-b7c41773-5416-417e-a7ec-4a194f6404e5.fleetuem.com | Unknown |
| fleet-test-15f706c7-6ef6-4277-92ac-91f838c64e96.fleetuem.com | Unknown |
| fleet-test-a6e4ab03-a796-4618-8202-c5ce2941c144.fleetuem.com | Unknown |
| android.clients.google.com | Unknown |
| mtalk.google.com | Unknown |
| fleet-test-1229e886-c142-4739-a16c-2471a74bdcfb.fleetuem.com | Unknown |
| api.segment.io | Unknown |
| index.docker.io | |
| check.trivy.dev | Unknown |
| mirrors.egr.msu.edu | Unknown |
| gcp.repo.almalinux.org | Unknown |
| fleet-test-1c1537a9-2574-4e77-a7fa-db6027948229.fleetuem.com | Unknown |
| plugins-artifacts.gradle.org | |
| fleet-test-aa483f52-51c7-45d5-9ee2-e892a1cccd53.fleetuem.com | Unknown |
| mise-versions.jdx.dev | Unknown |
| analytics.localstack.cloud | Unknown |
| assets.localstack.cloud | Unknown |
| gdmf.apple.com | Unknown |
| sparrow.cloudflare.com | Unknown |
| nodejs-dtb9tg8tj-openjs.vercel.app | Unknown |
| 6533a41321.us.cp0.konghq.tech | Unknown |
| 6533a41321.us.tp0.konghq.tech | Unknown |
| fleet-test-3d7560d6-3531-428c-a153-1c2f8045c3e3.fleetuem.com | Unknown |
| localstack.cloud | Unknown |
| fleet-test-609e8778-1f62-4f41-af81-dc6abf12de69.fleetuem.com | Unknown |
| fleet-test-f8d45259-5fdf-4eef-a378-049439b4834f.fleetuem.com | Unknown |
| fleet-test-2797973a-c81b-4281-a3bd-93107bb7cdc3.fleetuem.com | Unknown |
| fleet-test-27f5698c-c747-4e1c-9616-8046b5bc2e7e.fleetuem.com | Unknown |
| fleet-test-185eef91-8b86-43a3-8c93-a4960a251fd0.fleetuem.com | Unknown |
| 34c2jzs22kfv4o2zyaa3mao4.blob.core.windows.net | Unknown |
| api.nuget.org | Unknown |
| www.microsoft.com | |
| releases.hashicorp.com | |
| fleet-test-6cbd6fa8-98a8-4fb9-ba1d-bd2cbdda5f1f.fleetuem.com | Unknown |
| keyserver.ubuntu.com | |
| fleet-test-4e2862f1-ebfe-4a57-8661-e04ca24c087e.fleetuem.com | Unknown |
| fleet-test-6b2ce367-a7d2-407c-8db1-38e7e96b09c1.fleetuem.com | Unknown |
| fleet-test-1dcccaa3-c1b7-4bb1-ad8a-429715843347.fleetuem.com | Unknown |
| fleet-test-34924246-8863-49c0-8d64-f6b2cee4a89e.fleetuem.com | Unknown |
| fleet-test-209f1cb7-4b64-4a78-808c-f0bb617eaf5e.fleetuem.com | Unknown |
| fleet-test-4ed47249-9c26-4f4d-8d7a-5dc0e4ab38db.fleetuem.com | Unknown |
| fleet-test-4ee05cda-d1cd-4eb5-a80f-f9da309d973d.fleetuem.com | Unknown |
| fleet-test-390c91ed-68f5-458c-a56f-2f49808e17dd.fleetuem.com | Unknown |
| crl3.digicert.com | Unknown |
| fleet-test-ac61672a-0ec7-486f-82da-e50784cde9be.fleetuem.com | Unknown |
| usage.projectcalico.org | Unknown |
| digitalassetlinks.googleapis.com | |
| mir01.syntis.net | Unknown |
| rocky-linux-us-east4.production.gcp.mirrors.ctrliq.cloud | Unknown |
| fleet-test-616b1051-3adf-4e28-875d-0113ae58b308.fleetuem.com | Unknown |
| graph.microsoft.com | |
| keybase.io | Unknown |
| remoteprovisioning.googleapis.com | |
| rum.optimizely.com | Unknown |
| mirrors.hostiserver.com | Unknown |
| mirror.prolocation.net | Unknown |
| www.googleapis.com | |
| fleet-test-79c810c6-a1fe-41bb-8807-742921f4e6d4.fleetuem.com | Unknown |
| fleet-test-63ab60a6-34f1-4e55-b889-e88a9d135e45.fleetuem.com | Unknown |