StepSecurity Logo
LoginStart free
docker/setup-qemu-action

docker/setup-qemu-action

GitHub Action to install QEMU static binaries

GitHubGitHub Repository

540 stars

Node.js

Node Action

Score updated 7 days ago

GitHub Actions security score

docker/setup-qemu-action

Score

8/10

License

Apache License 2.0

Maintained

22 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

9 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 3864 open-source projects

Security Policy

security policy file detected

Networking Behavior of docker/setup-qemu-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
index.docker.ioDockerHubDockerHub
ports.ubuntu.comUbuntuUbuntu
mirror.steadfastnet.comUnknown
mirror.pilotfiber.comUnknown
nginx.orgUnknown
mirror.de.leaseweb.netUnknown
ftp-osl.osuosl.orgUnknown
archive.ubuntu.comUbuntuUbuntu
pubmirror3.math.uh.eduUnknown
mirror.hoobly.comUnknown
na.edge.kernel.orgUnknown
mirror.sfo12.us.leaseweb.netUnknown
keyserver.ubuntu.comUbuntuUbuntu
mirrors.iu13.netUnknown
mirrors.ocf.berkeley.eduUnknown
pkg-containers.githubusercontent.comGitHubGitHub
mirror.servaxnet.comUnknown
iad.mirror.rackspace.comUnknown
forksystems.mm.fcix.netUnknown
ftpmirror.your.orgUnknown
centos-stream-distro.1gservers.comUnknown
mirror-mci.yuki.net.ukUnknown
mirror.netcologne.deUnknown
atl.mirrors.knownhost.comUnknown
mirror.siena.eduUnknown
uvermont.mm.fcix.netUnknown
ftp.plusline.netUnknown
mirror.math.princeton.eduUnknown
mirror.arizona.eduUnknown
sum.golang.orgUnknown
api.github.comGitHubGitHub
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
dc.services.visualstudio.comUnknown
global.endpoint.security.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
unitedstates.cp.wd.microsoft.comMicrosoftMicrosoft
raw.githubusercontent.comGitHubGitHub
github.comGitHubGitHub
release-assets.githubusercontent.comGitHubGitHub
get.anchore.ioUnknown
ghcr.ioGitHubGitHub
proxy.golang.orgGolang ProxyGolang Proxy
storage.googleapis.comGoogleGoogle
fulcio.sigstore.devSigstoreSigstore
tuf-repo-cdn.sigstore.devSigstoreSigstore
rekor.sigstore.devSigstoreSigstore
toolbox-data.anchore.ioUnknown
registry.access.redhat.comRedhat
cdn01.quay.ioUnknown
cdn-ubi.redhat.comRedhat
check.trivy.devUnknown
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
gcr.ioUnknown
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
mirror.gcr.ioUnknown
mise.jdx.devUnknown