StepSecurity Logo
StepSecurity
LoginStart free
dawidd6/action-download-artifact

dawidd6/action-download-artifact

:gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria

GitHubGitHub Repository

804 stars

Node.js

Node Action

Maintained action available

Score updated 6 days ago

GitHub Actions security score

dawidd6/action-download-artifact

Score

7/10

License

MIT License

Maintained

30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

1 existing vulnerabilities detected

Branch protection

branch protection not enabled on development/release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 3832 open-source projects

Security Policy

security policy file not detected

Networking Behavior of dawidd6/action-download-artifact

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub
registry.npmjs.orgnpm Registrynpm Registry