StepSecurity Logo
StepSecurity
LoginStart free
amannn/action-semantic-pull-request

amannn/action-semantic-pull-request

A GitHub Action that ensures that your PR title matches the Conventional Commits spec

GitHubGitHub Repository

1382 stars

Node.js

Node Action

Maintained action available

Score updated 6 days ago

GitHub Actions security score

amannn/action-semantic-pull-request

Score

4/10

Pinnable

Yes

License

MIT License

Maintained

2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1

Vulnerabilities

46 existing vulnerabilities detected

Branch protection

branch protection not enabled on development/release branches

AI analysis

3 Security findings

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 9248 open-source projects

Security Policy

security policy file not detected

Networking Behavior of amannn/action-semantic-pull-request

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub
us-v20.events.data.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
cafe.github.comGitHubGitHub
slack.comUnknown
jenkins.o-ran-sc.orgUnknown
download.sonatype.comUnknown
wiki.hyperledger.orgUnknown
docs.onap.orgUnknown
dl.yarnpkg.comUnknown
jira.o-ran-sc.orgUnknown
www.google.comUnknown
static.rust-lang.orgUnknown
docs.opendaylight.orgUnknown
hub.docker.comUnknown
lf-aether.atlassian.netUnknown
gitlab.comGitLabGitLab
jenkins.edgexfoundry.orgUnknown
nexus-iq.wl.linuxfoundation.orgUnknown
linuxfoundation.orgUnknown
jira.akraino.orgUnknown
analysis-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
zowe.jfrog.ioUnknown
jenkins.lfbroadband.orgUnknown
pypi.orgPython RegistryPython Registry
auth.docker.ioDockerHubDockerHub
nexus.opendaylight.orgUnknown
github.comGitHubGitHub
gerrit.lfbroadband.orgUnknown
jenkins.opendaylight.orgUnknown
api.osv.devUnknown
o-ran-sc.1password.comUnknown
packages.microsoft.comMicrosoftMicrosoft
git.linuxfoundation.orgUnknown
docs.automotivelinux.orgUnknown
s3-logs.fd.ioUnknown
repo1.maven.orgUnknown
git.onap.orgUnknown
wiki.aswf.ioUnknown
gerrit.automotivelinux.orgUnknown
lf-opendaylight.atlassian.netUnknown
gerrit.onap.orgUnknown
wiki.lfedge.orgUnknown
gerrit.linuxfoundation.orgUnknown
api.scorecard.devUnknown
registry-1.docker.ioDockerHubDockerHub
nexus3.edgexfoundry.orgUnknown
cdn.azul.comUnknown
subscription.rhsm.redhat.comRedhat
nodejs.orgUnknown
endoflife.dateUnknown
nexus3.onap.orgUnknown
wiki.anuket.ioUnknown
eu.i.posthog.comUnknown
support.linuxfoundation.orgUnknown
keys.openpgp.orgUnknown
registry.nordix.orgUnknown
test.pypi.orgPython RegistryPython Registry
nexus3.o-ran-sc.orgUnknown
wiki.edgexfoundry.orgUnknown
dl.google.comGoogleGoogle
cdn.amazonlinux.comUnknown
docs.o-ran-sc.orgUnknown
www.linuxfoundation.orgUnknown
build.automotivelinux.orgUnknown
geo.mirror.pkgbuild.comUnknown
sum.golang.orgUnknown
dna-visualization-scannerdata-eu-central-1-prod.s3.eu-central-1.amazonaws.comUnknown
docs.zowe.orgUnknown
jira.opendaylight.orgUnknown
gerrit.o-ran-sc.orgUnknown
registry.yarnpkg.comUnknown
files.pythonhosted.orgPython RegistryPython Registry
readthedocs.orgUnknown
jira.opnfv.orgUnknown
uploads.github.comGitHubGitHub
repo.maven.apache.orgUnknown
nexus.onap.orgUnknown
wiki.o-ran-sc.orgUnknown
git.fd.ioUnknown
linuxfoundation.1password.comUnknown
oss-fuzz-build-logs.storage.googleapis.comGoogleGoogle
docs.releng.linuxfoundation.orgUnknown
aswf.jfrog.ioUnknown
get.helm.shUnknown
odpi.jfrog.ioUnknown
api.deps.devUnknown
wiki.akraino.orgUnknown
storage.googleapis.comGoogleGoogle
plugins.gradle.orgGradleGradle
upload.pypi.orgPython RegistryPython Registry
get.anchore.ioUnknown
ghcr.ioGitHubGitHub
logs.o-ran-sc.orgUnknown
hyperledger-fabric.readthedocs.ioUnknown
lf-o-ran-sc.atlassian.netUnknown
dna-visualization-scannerdata-eu-central-1-prod.s3.amazonaws.comUnknown
jenkins.onap.orgUnknown
logs.onap.orgUnknown
logs.edgexfoundry.orgUnknown
production.cloudfront.docker.comUnknown
fd.ioUnknown
www.bestpractices.devUnknown
wiki.automotivelinux.orgUnknown
wiki.fd.ioUnknown
hyperledger.jfrog.ioUnknown
docs.edgexfoundry.orgUnknown
jira.linuxfoundation.orgUnknown
git.opendaylight.orgUnknown
gerrit.opnfv.orgUnknown
sonarcloud.ioSonarSonar
wiki.openmainframeproject.orgUnknown
binaries.sonarsource.comUnknown
wiki.opendaylight.orgUnknown
tuf-repo.github.comGitHubGitHub
lf-onap.atlassian.netUnknown
logs.opendaylight.orgUnknown
cache.agilebits.comUnknown
git.opnfv.orgUnknown
docs.voltha.orgUnknown
services.gradle.orgGradleGradle
docs.anuket.ioUnknown
proxy.golang.orgGolang ProxyGolang Proxy
production.cloudflare.docker.comDockerHubDockerHub
grype.anchore.ioUnknown
jenkins.fd.ioUnknown
nexus.o-ran-sc.orgUnknown
git.automotivelinux.orgUnknown
analysis-sensorcache-eu-central-1-prod.s3.eu-central-1.amazonaws.comUnknown
wiki.onap.orgUnknown
jira.onap.orgUnknown
api.azul.comUnknown
vuln.go.devUnknown
jira.automotivelinux.orgUnknown
api.adoptium.netUnknown
gerrit.fd.ioUnknown
azure.archive.ubuntu.comUbuntuUbuntu
nexus3.opendaylight.orgUnknown
nexus.edgexfoundry.orgUnknown
registry.npmjs.orgnpm Registrynpm Registry
mirror.stream.centos.orgUnknown
app-updates.agilebits.comUnknown
releases.astral.shUnknown
astral.shUnknown
packagecloud.ioUnknown
lf-broadband.atlassian.netUnknown