StepSecurity Logo
LoginStart free
gradle/actions/setup-gradle

gradle/actions/setup-gradle

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

GitHubGithub Repository

198 stars

Node.js

Node Action

Updated 3 hours ago

GitHub Actions security score

gradle/actions/setup-gradle

Score

8/10

License

MIT License

Maintained

30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

4 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 2904 open-source projects

Security Policy

security policy file detected

Networking Behavior of gradle/actions/setup-gradle

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
edge.pkg.stlocal.less.buildmaven.pkg.stgradle.pkg.stdl.less.buildplugins.gradle.orgmaven.pkg.jetbrains.spaced3ob9fqp587by1.cloudfront.netelide-snapshots.storage-download.googleapis.comandroidx.devagent.less.buildplugins-artifacts.gradle.orgscans-in.gradle.comdownload.jetbrains.comdownload-cdn.jetbrains.comnodejs.orggithub.comobjects.githubusercontent.comregistry.npmjs.orgapi.foojay.iogradle.less.buildsonarcloud.ioscanner.sonarcloud.ioea6ne4j2sb.execute-api.eu-central-1.amazonaws.comsc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.comdc.services.visualstudio.comkeyserver.ubuntu.compgp.mit.edukeys.openpgp.orgservices.gradle.orgrepo.maven.apache.orgjcenter.bintray.comdownload.oracle.comdl.google.comindex.crates.iocrates.iostatic.crates.iorepo1.maven.orgdeveloper.android.comkotlinlang.orgdocs.oracle.commaven.google.comcommondatastorage.googleapis.comjpms.pkg.stnpm.pkg.stha.pool.sks-keyservers.netstorage.googleapis.comcli.less.buildmaven.elide.devstatus.gradle.comraw.githubusercontent.comoss.sonatype.orgapi.sonarcloud.iocaffeine.gradle-enterprise.clouddownloads.gradle.orggradle/actions/setup-gradle
Network DestinationOwner
edge.pkg.stUnknown
local.less.buildUnknown
maven.pkg.stUnknown
gradle.pkg.stUnknown
dl.less.buildUnknown
plugins.gradle.orgGradleGradle
maven.pkg.jetbrains.spaceUnknown
d3ob9fqp587by1.cloudfront.netUnknown
elide-snapshots.storage-download.googleapis.comGoogleGoogle
androidx.devUnknown
agent.less.buildUnknown
plugins-artifacts.gradle.orgGradleGradle
scans-in.gradle.comUnknown
download.jetbrains.comUnknown
download-cdn.jetbrains.comUnknown
nodejs.orgUnknown
github.comGitHubGitHub
objects.githubusercontent.comGitHubGitHub
registry.npmjs.orgnpm Registrynpm Registry
api.foojay.ioUnknown
gradle.less.buildUnknown
sonarcloud.ioSonarSonar
scanner.sonarcloud.ioSonarSonar
ea6ne4j2sb.execute-api.eu-central-1.amazonaws.comSonarSonar
sc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.comSonarSonar
dc.services.visualstudio.comUnknown
keyserver.ubuntu.comUbuntuUbuntu
pgp.mit.eduUnknown
keys.openpgp.orgUnknown
services.gradle.orgGradleGradle
repo.maven.apache.orgUnknown
jcenter.bintray.comUnknown
download.oracle.comUnknown
dl.google.comGoogleGoogle
index.crates.ioUnknown
crates.ioUnknown
static.crates.ioUnknown
repo1.maven.orgUnknown
developer.android.comUnknown
kotlinlang.orgUnknown
docs.oracle.comUnknown
maven.google.comUnknown
commondatastorage.googleapis.comGoogleGoogle
jpms.pkg.stUnknown
npm.pkg.stUnknown
ha.pool.sks-keyservers.netUnknown
storage.googleapis.comGoogleGoogle
cli.less.buildUnknown
maven.elide.devUnknown
status.gradle.comUnknown
raw.githubusercontent.comGitHubGitHub
oss.sonatype.orgUnknown
api.sonarcloud.ioSonarSonar
caffeine.gradle-enterprise.cloudUnknown
downloads.gradle.orgGradleGradle