dcarbone/install-yq-action

Install YQ into the action tool cache without needing nodejs

GitHub Repository

7 stars

Composite

Maintained action available

Score updated 4 hours ago

GitHub Actions security score

	dcarbone/install-yq-action
Score	4/10
Pinnable	Yes
License	Apache License 2.0
Maintained	2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Vulnerabilities	0 existing vulnerabilities detected
Branch protection	branch protection is not maximal on development and all release branches
AI analysis	4 Security findings
Manual code review	-
Secure publishing	-
Signed commits	-
Automated security tools	-
Popular	Used by 185 open-source projects
Security Policy	security policy file not detected

Networking Behavior of dcarbone/install-yq-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination

Network Destination	Owner
github.com	GitHub
objects.githubusercontent.com	GitHub