StepSecurity Logo
StepSecurity
LoginStart free
coverallsapp/github-action

coverallsapp/github-action

Coveralls Github Action

GitHubGitHub Repository

521 stars

Composite

Maintained action available

Score updated 6 days ago

GitHub Actions security score

coverallsapp/github-action

Score

7/10

Pinnable

Yes

License

MIT License

Maintained

5 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 6

Vulnerabilities

0 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

AI analysis

4 Security findings

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 14496 open-source projects

Security Policy

security policy file not detected

Networking Behavior of coverallsapp/github-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
coveralls.ioUnknown
pypi.orgPython RegistryPython Registry
raw.githubusercontent.comGitHubGitHub
proxy.golang.orgGolang ProxyGolang Proxy
release-assets.githubusercontent.comGitHubGitHub
api.segment.ioUnknown
formulae.brew.shUnknown
api.github.comGitHubGitHub
ghcr.ioGitHubGitHub
pkg-containers.githubusercontent.comGitHubGitHub
mesu.apple.comUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
ocsp.digicert.comUnknown
pancake.apple.comUnknown
xp.apple.comUnknown
swscan.apple.comUnknown
fbs.smoot.apple.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
gdmf.apple.comUnknown
apple-relay.fastly-edge.comUnknown
ipcdn.apple.comUnknown
mask-api.icloud.comUnknown
assets-mercury.mzstatic.comUnknown
apple-relay.cloudflare.comUnknown
0.pool.ntp.orgUnknown
gateway.icloud.comUnknown
ocsp2.apple.comUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
device-config.pcms.apple.comUnknown
incoming.telemetry.mozilla.orgUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
dns.msftncsi.comUnknown
configuration.ls.apple.comUnknown
swallow.apple.comUnknown
arc.msn.comUnknown
fd.api.iris.microsoft.comMicrosoftMicrosoft
ocsp.sectigo.comUnknown
metrics.icloud.comUnknown
xp.itunes-apple.com.akadns.netUnknown
bag.itunes.apple.comUnknown
mask.icloud.comUnknown
mask-h2.icloud.comUnknown
init.itunes.apple.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
swdist.apple.comUnknown
xp.v.aaplimg.comUnknown
swdist.apple.com.akadns.netUnknown
calendars.icloud.comUnknown
ocsp.usertrust.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
au.download.windowsupdate.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
amp-api.media.apple.comUnknown
cds.apple.comUnknown
help.apple.comUnknown
ocsp.comodoca.com.cdn.cloudflare.netUnknown
experiments.apple.comUnknown
apps.mzstatic.comUnknown
api.apple-cloudkit.comUnknown
dc.services.visualstudio.comUnknown
help.origin-apple.com.akadns.netUnknown
configuration.apple.com.akadns.netUnknown
c.apple.newsUnknown
news-edge.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
valid.apple.comUnknown
ohttp-relay1.fastly-edge.comUnknown
www.microsoft.comMicrosoftMicrosoft
stocks-data-service.apple.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
login.live.comUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
humb.apple.comUnknown
ocsp.edge.digicert.comUnknown
oneocsp.microsoft.comMicrosoftMicrosoft
ocsp2.apple.com.edgekey.netUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
ab.apple.com.akadns.netUnknown
images-mercury.mzstatic.comUnknown
fpinit-us-w.edge-itunes-apple.com.akadns.netUnknown
is4-ssl.mzstatic.comUnknown
is2-ssl.mzstatic.comUnknown
is3-ssl.mzstatic.comUnknown
is5-ssl.mzstatic.comUnknown
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
swdist.g.aaplimg.comUnknown
gdmf.v.aaplimg.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
gspe1-ssl.ls.apple.comUnknown
stocks-edge.apple.comUnknown
apps.mzstatic.com-v1.edgesuite.netUnknown
ocsp.comodoca.comUnknown
dns.googleUnknown
_dns.resolver.arpaUnknown
eip-terr-na.cdp1.digicert.com.akahost.netUnknown
ecs.office.comUnknown
fs.microsoft.comMicrosoftMicrosoft
configuration-lb.ls-apple.com.akadns.netUnknown
adl.windows.comUnknown
weather-edge.apple.comUnknown
gateway-oblivious.apple.comUnknown
configuration.apple.com.edgekey.netUnknown
api.smoot.apple.comUnknown
client.wns.windows.comUnknown
cdn-h3.g.aaplimg.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
v1.ta2.fe2cr.update.microsoft.comMicrosoftMicrosoft
msedge.b.tlu.dl.delivery.mp.microsoft.comMicrosoftMicrosoft
ipcdn-lb.apple.com.akadns.netUnknown
e3528.dscg.akamaiedge.netUnknown
xp.g.aaplimg.comUnknown
iadsdk.apple.comUnknown
itunes.apple.comUnknown
token.safebrowsing.appleUnknown
gdmf-ados.apple.comUnknown
proxy.safebrowsing.appleUnknown
ipcdn-web.apple.comUnknown
configuration.g.aaplimg.comUnknown
gsp57-ssl-background.ls.apple.comUnknown
publicassets.cdn-apple.comUnknown
cp10.cloudflare.comUnknown
mesu-cdn.apple.com.akadns.netUnknown
cf.iadsdk.apple.comUnknown
updates-http.cdn-apple.comUnknown
ml.cdn-apple.comUnknown
lcdn-locator.apple.comUnknown
init-kt.apple.comUnknown
bag-cdn-lb.itunes-apple.com.akadns.netUnknown
prod.ingestion-edge.prod.dataops.mozgcp.netUnknown
prod.ingestion-edge.prod.dataservices.mozgcp.netUnknown
bag-cdn.itunes-apple.com.akadns.netUnknown
www.msftconnecttest.comUnknown
cdn.smoot.apple.comUnknown
www.msftncsi.comUnknown
safebrowsing.googleapis.comGoogleGoogle
e5977.dsce9.akamaiedge.netUnknown
metricsedge-continent-wrr.v.aaplimg.comUnknown
websitereview.corp.apple.comUnknown
apps-mzstatic-cdn.itunes-apple.com.akadns.netUnknown
setup.icloud.comUnknown
is1-ssl.mzstatic.comUnknown
crl.microsoft.comMicrosoftMicrosoft
h3.apis.apple.map.fastly.netUnknown