StepSecurity Logo
StepSecurity
LoginStart free
gradle/actions/setup-gradle

gradle/actions/setup-gradle

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

GitHubGitHub Repository

328 stars

Node.js

Node Action

Maintained action available

Score updated 2 hours ago

GitHub Actions security score

gradle/actions/setup-gradle

Score

7/10

License

Other

Maintained

30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

2 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 8136 open-source projects

Security Policy

security policy file detected

Networking Behavior of gradle/actions/setup-gradle

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
edge.pkg.stUnknown
local.less.buildUnknown
maven.pkg.stUnknown
gradle.pkg.stUnknown
dl.less.buildUnknown
plugins.gradle.orgGradleGradle
maven.pkg.jetbrains.spaceUnknown
d3ob9fqp587by1.cloudfront.netUnknown
elide-snapshots.storage-download.googleapis.comGoogleGoogle
androidx.devUnknown
agent.less.buildUnknown
plugins-artifacts.gradle.orgGradleGradle
scans-in.gradle.comUnknown
download.jetbrains.comUnknown
download-cdn.jetbrains.comUnknown
nodejs.orgUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
registry.npmjs.orgnpm Registrynpm Registry
api.foojay.ioUnknown
gradle.less.buildUnknown
sonarcloud.ioSonarSonar
scanner.sonarcloud.ioSonarSonar
ea6ne4j2sb.execute-api.eu-central-1.amazonaws.comSonarSonar
sc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
dc.services.visualstudio.comUnknown
keyserver.ubuntu.comUbuntuUbuntu
pgp.mit.eduUnknown
keys.openpgp.orgUnknown
services.gradle.orgGradleGradle
repo.maven.apache.orgUnknown
jcenter.bintray.comUnknown
download.oracle.comUnknown
dl.google.comGoogleGoogle
index.crates.ioUnknown
crates.ioUnknown
static.crates.ioUnknown
repo1.maven.orgUnknown
developer.android.comUnknown
kotlinlang.orgUnknown
docs.oracle.comUnknown
maven.google.comUnknown
commondatastorage.googleapis.comGoogleGoogle
jpms.pkg.stUnknown
npm.pkg.stUnknown
ha.pool.sks-keyservers.netUnknown
storage.googleapis.comGoogleGoogle
cli.less.buildUnknown
maven.elide.devUnknown
status.gradle.comUnknown
raw.githubusercontent.comGitHubGitHub
oss.sonatype.orgUnknown
api.sonarcloud.ioSonarSonar
caffeine.gradle-enterprise.cloudUnknown
downloads.gradle.orgGradleGradle
release-assets.githubusercontent.comGitHubGitHub
wdcp.microsoft.comMicrosoftMicrosoft
go.microsoft.comMicrosoftMicrosoft
definitionupdates.microsoft.comMicrosoftMicrosoft
x.cp.wd.microsoft.comMicrosoftMicrosoft
global.endpoint.security.microsoft.comMicrosoftMicrosoft
winatp-gw-cus.microsoft.comMicrosoftMicrosoft
pypi.orgPython RegistryPython Registry
gdmf.apple.comUnknown
xp.apple.comUnknown
dns.msftncsi.comUnknown
mobile.events.data.microsoft.comMicrosoftMicrosoft
ocsp.digicert.comUnknown
settings-win.data.microsoft.comMicrosoftMicrosoft
incoming.telemetry.mozilla.orgUnknown
telemetry-incoming.r53-2.services.mozilla.comUnknown
fs.microsoft.comMicrosoftMicrosoft
client.wns.windows.comUnknown
api.github.comGitHubGitHub
swscan.apple.comUnknown
fbs.smoot.apple.comUnknown
xp.itunes-apple.com.akadns.netUnknown
swdist.apple.comUnknown
apple-relay.fastly-edge.comUnknown
xp-cdn-lb.itunes-apple.com.akadns.netUnknown
valid.apple.comUnknown
pancake.apple.comUnknown
mesu.apple.comUnknown
ocsp2.apple.comUnknown
s.mzstatic.comUnknown
fpinit.itunes.apple.comUnknown
sf-api-token-service.itunes.apple.comUnknown
assets-mercury.mzstatic.comUnknown
cds.apple.comUnknown
ocsp2.g.aaplimg.comUnknown
api.apple-cloudkit.comUnknown
metrics.icloud.comUnknown
humb.apple.comUnknown
mesu-cdn.origin-apple.com.akadns.netUnknown
experiments.apple.comUnknown
geo.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
kv501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp501.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
au.download.windowsupdate.comUnknown
device-config.pcms.apple.comUnknown
ipcdn.apple.comUnknown
calendars.icloud.comUnknown
gateway.icloud.comUnknown
ecs.office.comUnknown
apps.mzstatic.comUnknown
updates.cdn-apple.comUnknown
configuration.apple.comUnknown
bag.itunes.apple.comUnknown
fe2cr.update.microsoft.comMicrosoftMicrosoft
amp-api.media.apple.comUnknown
swdist.apple.com.akadns.netUnknown
validation-v2.sls.microsoft.comMicrosoftMicrosoft
login.live.comUnknown
news-edge.apple.comUnknown
c.apple.newsUnknown
configuration.apple.com.akadns.netUnknown
api.apple-cloudkit.fe2.apple-dns.netUnknown
ipcdn-lb.apple.com.akadns.netUnknown
ocsp.sectigo.comUnknown
configuration.ls.apple.comUnknown
apple-relay.cloudflare.comUnknown
0.pool.ntp.orgUnknown
bag-cdn.itunes-apple.com.akadns.netUnknown
mask-api.icloud.comUnknown
tas02.sls.update.microsoft.comMicrosoftMicrosoft
www.microsoft.comMicrosoftMicrosoft
download.windowsupdate.comUnknown
kv801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp801.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
oneocsp.microsoft.comMicrosoftMicrosoft
swallow.apple.comUnknown
configuration-row-lb.apple.com.akadns.netUnknown
gateway-oblivious.apple.comUnknown
api.smoot.apple.comUnknown
ocsp.comodoca.comUnknown
init.itunes.apple.comUnknown
kv601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
cp601.prod.do.dsp.mp.microsoft.comMicrosoftMicrosoft
help.apple.comUnknown
wns2-bn3p.wns.windows.comUnknown
packages.microsoft.comMicrosoftMicrosoft
swdist.g.aaplimg.comUnknown
help.origin-apple.com.akadns.netUnknown
weather-edge.apple.comUnknown
dns.googleUnknown
_dns.resolver.arpaUnknown
e5977.dsce9.akamaiedge.netUnknown
adl.windows.comUnknown
configuration-lb.ls-apple.com.akadns.netUnknown
updates.g.aaplimg.comUnknown
build.shibboleth.netUnknown
repository.jboss.orgUnknown
timestamp.apple.comUnknown
appstoreconnect.apple.comUnknown
notary-submissions-prod.s3-accelerate.amazonaws.comUnknown
repo.apache.maven.orgUnknown
mask.icloud.comUnknown
swscan-cdn.apple.com.akadns.netUnknown
blob.bn9prdstrz04a.store.core.windows.netUnknown
ocsp.usertrust.comUnknown
central.sonatype.comUnknown
registry-1.docker.ioDockerHubDockerHub
auth.docker.ioDockerHubDockerHub
production.cloudfront.docker.comUnknown
dl-cdn.alpinelinux.orgAlpine LinuxAlpine Linux
production.cloudflare.docker.comDockerHubDockerHub
v1.ta2.fe2cr.update.microsoft.comMicrosoftMicrosoft
gspe1-ssl.ls.apple.comUnknown