StepSecurity Logo
StepSecurity
LoginStart free
docker/setup-qemu-action

docker/setup-qemu-action

GitHub Action to install QEMU static binaries

GitHubGitHub Repository

564 stars

Node.js

Node Action

Maintained action available

Score updated 5 hours ago

GitHub Actions security score

docker/setup-qemu-action

Score

8/10

License

Apache License 2.0

Maintained

30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

34 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 4264 open-source projects

Security Policy

security policy file detected

Networking Behavior of docker/setup-qemu-action

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudflare.docker.comDockerHubDockerHub
index.docker.ioDockerHubDockerHub
ports.ubuntu.comUbuntuUbuntu
mirror.steadfastnet.comUnknown
mirror.pilotfiber.comUnknown
nginx.orgUnknown
mirror.de.leaseweb.netUnknown
ftp-osl.osuosl.orgUnknown
archive.ubuntu.comUbuntuUbuntu
pubmirror3.math.uh.eduUnknown
mirror.hoobly.comUnknown
na.edge.kernel.orgUnknown
mirror.sfo12.us.leaseweb.netUnknown
keyserver.ubuntu.comUbuntuUbuntu
mirrors.iu13.netUnknown
mirrors.ocf.berkeley.eduUnknown
pkg-containers.githubusercontent.comGitHubGitHub
mirror.servaxnet.comUnknown
iad.mirror.rackspace.comUnknown
forksystems.mm.fcix.netUnknown
ftpmirror.your.orgUnknown
centos-stream-distro.1gservers.comUnknown
mirror-mci.yuki.net.ukUnknown
mirror.netcologne.deUnknown
atl.mirrors.knownhost.comUnknown
mirror.siena.eduUnknown
uvermont.mm.fcix.netUnknown
ftp.plusline.netUnknown
mirror.math.princeton.eduUnknown
mirror.arizona.eduUnknown
sum.golang.orgUnknown
api.github.comGitHubGitHub
docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.comDockerHubDockerHub
dc.services.visualstudio.comUnknown
global.endpoint.security.microsoft.comMicrosoftMicrosoft
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
us-v20.events.data.microsoft.comMicrosoftMicrosoft
unitedstates.cp.wd.microsoft.comMicrosoftMicrosoft
raw.githubusercontent.comGitHubGitHub
github.comGitHubGitHub
release-assets.githubusercontent.comGitHubGitHub
get.anchore.ioUnknown
ghcr.ioGitHubGitHub
proxy.golang.orgGolang ProxyGolang Proxy
storage.googleapis.comGoogleGoogle
fulcio.sigstore.devSigstoreSigstore
tuf-repo-cdn.sigstore.devSigstoreSigstore
rekor.sigstore.devSigstoreSigstore
toolbox-data.anchore.ioUnknown
registry.access.redhat.comRedhat
cdn01.quay.ioUnknown
cdn-ubi.redhat.comRedhat
check.trivy.devUnknown
dl.k8s.ioUnknown
cdn.dl.k8s.ioUnknown
gcr.ioUnknown
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
mirror.gcr.ioUnknown
mise.jdx.devUnknown
packages.microsoft.comMicrosoftMicrosoft
timestamp.sigstore.devSigstoreSigstore
security.ubuntu.comUbuntuUbuntu
container-registry.oracle.comUnknown
id55cllpgrte.compat.objectstorage.us-ashburn-1.oraclecloud.comUnknown
yum.oracle.comUnknown
id55cllpgrte.compat.objectstorage.us-phoenix-1.oraclecloud.comUnknown
prod.app-api.stepsecurity.ioUnknown
id55cllpgrte.compat.objectstorage.us-sanjose-1.oraclecloud.comUnknown
charts.bitnami.comUnknown
repo.broadcom.comUnknown
prometheus-community.github.ioUnknown
charts.helm.shUnknown
registry.k8s.ioUnknown
us-west2-docker.pkg.devUnknown
prod-registry-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.comUnknown
quay.ioUnknown